Windows Defender Detected Citrix Services as Malware:
Windows Defender has caused problems for some Citrix customers after deleting two services incorrectly detected as malware.
The problem appears to be caused by the KB2267602 update. Windows Defender users who installed the update may have had their Citrix Broker and HighAvailability services on Delivery Controllers and Cloud Connectors deleted after they were erroneously detected as a trojan.
According to Citrix, impacted users may notice that the Broker service is no longer available in the Services console, that the BrokerService.exe file is missing from the Program Files folder, and an error saying that the Broker service could not be contacted.
Microsoft has released antivirus definition update 1.321.1341.0 to address the problem and Citrix has provided instructions on how to remove the buggy update and install the new one.
(Score: 0) by Anonymous Coward on Saturday August 15 2020, @05:31PM (3 children)
Most shops running this are going to be professional shops. So it probably won't affect users directly, it just adds to the ballaches that the poor admins in a Micro$oft shop have to deal with.
(Score: 1, Flamebait) by Runaway1956 on Saturday August 15 2020, @05:48PM (2 children)
Define "professional" please. We have Citrix, but it strains reality to describe our IT people as "professional". Easier to describe a bunch of kids trying to hack into the school's computers as "professional". Especially if they actually succeed.
(Score: 0) by Anonymous Coward on Saturday August 15 2020, @06:06PM (1 child)
People that get paid to maintain that shit, so that the end users don't have to.
(Score: 3, Interesting) by Runaway1956 on Saturday August 15 2020, @06:18PM
Alright - our IT people do get paid. I don't think they actually maintain anything though.
In ~15 years, I've seen three different "security" products rolled out on the company's machines. Each of them brought the computers to their knees, so that everyone sits there waiting - waiting - waiting. After months of bitching, each of those products was unintalled. I mean, there was NO TESTING, at all. Someone had a meeting, talked about the wonderful advertising of Product X, and he wanted Product X installed. BOOM! netinstall product_x
It's this sort of thing that convinces you that you never want to reboot your work computer, because it will take a half hour for it to come back up to an agonizing crawl.