Question
Our scanning account is being locked by AV because of suspicious activity. The main processes involved seem to be wsmprovhost.exe, cvtres.exe, conhost.exe, and csc.exe. Are these related to Lansweeper?
Answer
The processes mentioned — wsmprovhost.exe, cvtres.exe, conhost.exe, and csc.exe — are all legitimate Windows system processes and utilities. They commonly run in the background to support various Lansweeper operations, including tasks such as PowerShell-based scanning.
