Arlecho's ScreenConnect 6 releases

[lostboy4480]

mario44222 in post#625 had the solution for me for the Spinning wheel issue, The database connect string for the session database in web.config was missing DateTimeFormat=Ticks at the end of the line, Mine was around line 216


This is what was in my web.config when i was having the issue
<add name="SessionDatabase" providerName="SQLite" connectionString="Data Source=|DataDirectory|/Session.db; DateTimeKind=Utc; Foreign Keys=true; Page Size=4096; Journal Mode=WAL; BaseSchemaName=; Cache Size=1000; Memory Mapped Size=10000000000" />

This is what fixed my issue
<add name="SessionDatabase" providerName="SQLite" connectionString="Data Source=|DataDirectory|/Session.db; DateTimeKind=Utc; Foreign Keys=true; Page Size=4096; Journal Mode=WAL; BaseSchemaName=; Cache Size=1000; Memory Mapped Size=10000000000; DateTimeFormat=Ticks" />

also make sure your license.xml file from screenconnect/AppData is renamed or deleted

[exe.bat]

Our installation got hacked today. I tried to upgrade and then patch with new patcher but it did not work so I uninstalled and installed again but now I have a problem with ScreenConnect Security Manager service not starting at all.

Clean installation with only patch applied.

Did anyone had similar problem ?


I tried the new version of the patcher V3.4.1 but the problem is still there

Clean installation without patch - all services start. As soon as I apply the patch ScreenConnect Security Manager service wont start at all

[Sinauth]

Can detect if it has already been installed, was thinking about just deleting the useless files then.

---

Changelog v3.4.0:
- Fixed security issue

Download
https://farwestbox.com:510/shares/file/ejSgu2BztCk/
FckPtn!

Notices, please read carefully
- Patch the installer before installing to prevent leaking your information!
- Linux can be patched, just copy the files over to a windows machine and select the directory!
- "External Accessibility Check", "Version Check" and "Browser URL Check" will now always fail!
- Installing/updating extensions could theoretically be spotted by Connectwise as they are downloaded directly from their servers!
- License no longer displays (not required for patch to function)
- Please do not post thanks and other posts that do not contribute (the mods don't like them and it clutters the thread)
- Hosts file editing no longer required as the uri's are patched out of the appropriate files

Thank you Arlecho! The new patcher is working perfectly fine. Tested on 2x existing installs.

---

I'm fairly certain that everyone with on-prem was hacked. Do we know if the ScreenConnect hosted solution was also affected?

Also, those of us who experienced this today, have you noticed anything untoward? I run 2x installs and thankfully other than the issue of them regenerating the User.xml, I haven't been able to detect any other issues.

I was worried that they may have had the chance to connect with some clients and install either back-door remote or encryption ransom malware, etc.

[iscream]

After patch im still getting emails that someone is trying to login to admin account. what else can i do?

[whitewidow]

Reddit discussions

https://www.reddit.com/r/msp/comments/1a...enconnect/

https://www.reddit.com/r/ScreenConnect/c...se_broken/

[Arlecho]

Clean installation without patch - all services start. As soon as I apply the patch ScreenConnect Security Manager service wont start at all

Sorry cannot replicate that, are you absolutely sure it is a completely clean install (e.g. no previous files) and a up to date server?

[whitewidow]

Changelog v3.4.1:
- Fix services not being started

Download
https://farwestbox.com:510/shares/file/WvS52t4bSge/
FckPtn!

Notices, please read carefully
- Patch the installer before installing to prevent leaking your information!
- Linux can be patched, just copy the files over to a windows machine and select the directory!
- "External Accessibility Check", "Version Check"  and "Browser URL Check" will now always fail!
- Installing/updating extensions could theoretically be spotted by Connectwise as they are downloaded directly from their servers!
- License no longer displays (not required for patch to function)
- Please do not post thanks and other posts that do not contribute (the mods don't like them and it clutters the thread)
- Hosts file editing no longer required as the uri's are patched out of the appropriate files
- For those updating and getting a spinning wheel, please search the thread for solutions

Services are failing to start with the latest patcher on 23.9.8.8811. Even after server reboot. Any ideas?

Error 1053: The service did not respond to the start or control request in a timely fashion.

---

Clean installation without patch - all services start. As soon as I apply the patch ScreenConnect Security Manager service wont start at all

Sorry cannot replicate that, are you absolutely sure it is a completely clean install (e.g. no previous files) and a up to date server?

Similar issue but was an upgrade from 21.5.3025.7772.

After hack stopped all services and blocked SC in my pfSense firewall. I then restored from yesterdays backup, upgraded to 22.8.10013.8329 with your latest patch. Services started and was able to login. Upgraded to 23.9.8.8811 using latest patch and services are failing to start.

[fiddler]

mario44222 in post#625 had the solution for me for the Spinning wheel issue, The database connect string for the session database in web.config was missing DateTimeFormat=Ticks at the end of the line, Mine was around line 216


This is what was in my web.config when i was having the issue
<add name="SessionDatabase" providerName="SQLite" connectionString="Data Source=|DataDirectory|/Session.db; DateTimeKind=Utc; Foreign Keys=true; Page Size=4096; Journal Mode=WAL; BaseSchemaName=; Cache Size=1000; Memory Mapped Size=10000000000" />

This is what fixed my issue
<add name="SessionDatabase" providerName="SQLite" connectionString="Data Source=|DataDirectory|/Session.db; DateTimeKind=Utc; Foreign Keys=true; Page Size=4096; Journal Mode=WAL; BaseSchemaName=; Cache Size=1000; Memory Mapped Size=10000000000; DateTimeFormat=Ticks" />

also make sure your license.xml file from screenconnect/AppData is renamed or deleted

This worked for me! Thanks so much.

[sancho78]

Having the same issue with 23.9.8.8811
Version 22.8.10013 works fine
Patch 3.4.1

[whitewidow]

A Catastrophe For Control: Understanding the ScreenConnect Authentication Bypass
https://www.huntress.com/blog/a-catastro...%E2%80%9D)