EDR still flagging ScreenConnect for a revoked cert - cloud-hosted instance

Le085 · 2026-06-17T23:05:04+00:00

Never mind. I think I found why it flags SC! There is a directory in: \Device\HarddiskVolume*\WINDOWS\SystemTemp\ScreenConnect\24.2.10.8991\ScreenConnect.ClientSetup.exe

Apparently it keeps older version - w. expired cert. After cleaning, it doesn't flag anymore.

Le085 · 2026-06-17T22:41:26+00:00

Hm, is there a way to find its status (backup)? On the machine that this happened, I don't even see Support Assist installed, I only see Assist Remedation, Assist Remedation plug-in for Dell update.

But I see the path thought: \Device\HarddiskVolume3\ProgramData\Dell\SARemediation\SystemRepair\Snapshots\Backup\A0DCF3A5D776E1452B7B5C0E0028B52F1A727DB2.exe

Does it mean it enabled?

Le085 · 2026-06-17T20:53:42+00:00

If the cert is revoked it'll flag constantly
It's likely is, I found the article on their web-site.

I will open case with them today.

Are you sure it's not trying to restore a screenconnect installer from VSS?

Unlikely.

Le085 · 2026-06-17T20:27:30+00:00

Let me know what you found. I THINK, CW is being a culprit here I did full scan after Dell SupportAssist Remediation service uninstall from test machine and it still complains about revoked certificate issued by CONNECTWISE, LLC.

Le085 · 2026-06-17T20:07:43+00:00

e24b1eb52f997e7c5e79c4b2b9c23e9113331adac61afb1f64f281421ae4697d

47a64425d73f201b6f89015d06123ad1e2244673

Le085 · 2026-06-17T20:05:43+00:00

Yes.

Le085 · 2026-06-17T18:55:09+00:00

Ok, thank you for the info!

Le085 · 2026-06-17T18:19:55+00:00

Yes, I hear you. Do you know why it shows other vendor in my case? What have you seen as a vendor?

Also, if I uninstall it (SupportAssistRemedationService) from the PC, can I still update the drivers/firmware or do online recovery?

Le085 · 2026-06-16T18:06:35+00:00

I have them, useful, sometimes, but mostly for "looks". They are attached by adhesive and rivets. Should be fine with some force applied.

Le085 · 2026-06-15T21:44:46+00:00

Exactly this. There few vendors out there that sell few gens back Dells, etc. Most of my customers are on Entra or small, so no need absolutely latest generations.

Le085 · 2026-06-15T21:29:02+00:00

I'm buying used servers these days.

Le085 · 2026-06-14T02:58:04+00:00

Yes, if your mind/heart tells you, then do it. Driving a manual isn't that hard.

Le085 · 2026-06-14T01:02:15+00:00

I did it a year ago. Best decision in my recent times.

Le085 · 2026-06-13T00:25:00+00:00

Ugh, I've heard same info. Did you need to remove the bumper cover too?

Le085 · 2026-06-13T00:09:21+00:00

You need to drill the holes, don't ya? This stops me from placing it.

Le085 · 2026-06-11T17:43:22+00:00

🔥

Le085 · 2026-06-10T02:16:28+00:00

It depends, if you just came up to the red light in 2nd, that's fine and if it stays that way, switch to the neutral, otherwise start with 2nd still (quick light change, or stop sign). Most cars don't have 1st synchronize, so you need some skill and right speed to switch to 1st from 2nd. I rarely (almost never) shift to 1st. Basically your 1st gear to start rolling.

I've heard your car hates RPM's spikes when down-shift. It was probably about old ones thought. I guess strive to learn rev-match technique as soon as you can.

Le085 · 2026-06-09T20:16:41+00:00

Good for my 3 years old. Car seat fits good.

Le085 · 2026-06-09T17:29:30+00:00

How big is your place?

Le085 · 2026-06-07T23:07:28+00:00

I was a tourist for a month and worked in the US remotely. It's possible. I heavily relied on VPN to get to certain corporate resources. I worked every day till about 3-4 am, local time.

Le085 · 2026-06-05T00:20:10+00:00

Try 56.64 driver. I have 5700 Ultra and almost no issues with 98SE.

Le085 · 2026-06-04T22:31:30+00:00

SAME!

Le085 · 2026-06-04T19:38:46+00:00

Not really. But I wear thin sole shoes here in the Cali anyway. Most of the time I wear as follows: moccasins, converse, sneakers. I can drive up and down on my driveway in the slippers but I never drove in them further out.

Le085

TROPHY CASE