Shadow incident

[Global] - Shadow App Flagged as not trusted by some antivirus

Minor Resolved View vendor source →

Shadow experienced a minor incident on July 21, 2026 affecting Shadow PC and Shadow PC (Dunkerque (FRDUN02)) and 1 more component, lasting 7d 23h. The incident has been resolved; the full update timeline is below.

Started
Jul 21, 2026, 09:37 AM UTC
Resolved
Jul 29, 2026, 09:36 AM UTC
Duration
7d 23h
Detected by Pingoru
Jul 21, 2026, 09:37 AM UTC

Affected components

Shadow PCShadow PC (Dunkerque (FRDUN02))Shadow PC (Strasbourg (FRSBG01))Shadow PC (Frankfurt (DEFRA01))Shadow PC (Montréal (CAMTL01))Shadow PC (Washington DC (USWDC01))Shadow PC (Portland (USPOR01))

Update timeline

  1. investigating Jul 21, 2026, 09:37 AM UTC

    Windows users may experience application crashes or be unable to start the Shadow app because some antivirus software, including Avast, may incorrectly flag **ShadowPCDisplayHelper.exe** as malicious. This executable is used by the Shadow overlay. If it is blocked or quarantined, the entire Shadow app may fail to launch. Our teams are currently investigating the issue. In the meantime, affected users can restore the file from quarantine and add **ShadowPCDisplayHelper.exe** to their antivirus allowlist or exceptions.

  2. identified Jul 21, 2026, 10:12 AM UTC

    We have found that for now Avast and AVG are falsely reporting some of our processes as malicious: ShadowPCDisplayHelper.exe (overlay)crashpad_handler.exe (crash reporting)

  3. investigating Jul 21, 2026, 12:37 PM UTC

    We have now confirmed that at least three antivirus solutions are incorrectly reporting a false positive: - Avast - AVG - Norton We have reported the issue to all three companies and hope it will be resolved quickly. In the meantime, if you experience the same issue with a different antivirus solution, please contact our Support team and provide: - The name of the detected process - The name of the antivirus software - Any detection or threat ID provided by the antivirus, if available

  4. investigating Jul 21, 2026, 03:13 PM UTC

    We're still in talks with antivirus providers to whitelist the new Shadow binary. In the meantime, we've reverted the Shadow PC app on Windows to the previous stable version to avoid false positives blocking access. If you'd still like to use the new build, it remains available through the beta channel. Thanks for your patience while we work with our partners to get this resolved.

  5. monitoring Jul 24, 2026, 10:17 AM UTC

    We have deployed a version in Beta environment that should fix this issue. We will be monitoring there and if all is good, this version will reach production environment next week