Shadow incident
[Global] - Shadow App Flagged as not trusted by some antivirus
Shadow is currently experiencing a minor incident affecting Shadow PC and Shadow PC (Dunkerque (FRDUN02)) and 1 more component, which began 1d ago. The vendor's full update timeline is below.
Affected components
Update timeline
- investigating Jul 21, 2026, 09:37 AM UTC
Windows users may experience application crashes or be unable to start the Shadow app because some antivirus software, including Avast, may incorrectly flag **ShadowPCDisplayHelper.exe** as malicious. This executable is used by the Shadow overlay. If it is blocked or quarantined, the entire Shadow app may fail to launch. Our teams are currently investigating the issue. In the meantime, affected users can restore the file from quarantine and add **ShadowPCDisplayHelper.exe** to their antivirus allowlist or exceptions.
- identified Jul 21, 2026, 10:12 AM UTC
We have found that for now Avast and AVG are falsely reporting some of our processes as malicious: ShadowPCDisplayHelper.exe (overlay)crashpad_handler.exe (crash reporting)
- investigating Jul 21, 2026, 12:37 PM UTC
We have now confirmed that at least three antivirus solutions are incorrectly reporting a false positive: - Avast - AVG - Norton We have reported the issue to all three companies and hope it will be resolved quickly. In the meantime, if you experience the same issue with a different antivirus solution, please contact our Support team and provide: - The name of the detected process - The name of the antivirus software - Any detection or threat ID provided by the antivirus, if available
- investigating Jul 21, 2026, 03:13 PM UTC
We're still in talks with antivirus providers to whitelist the new Shadow binary. In the meantime, we've reverted the Shadow PC app on Windows to the previous stable version to avoid false positives blocking access. If you'd still like to use the new build, it remains available through the beta channel. Thanks for your patience while we work with our partners to get this resolved.