The most shared 'fix' for the AnyDesk popup is also the most dangerous one: install an old version and turn off updates. This page explains, with the documented facts, why that trade — a quiet popup in exchange for an unpatched remote-control program — is one no technician should recommend.
Every remote-access program is a loaded tool: whoever gets through it gets your screen, your files and your keyboard. That is exactly why the version of it matters more than the version of almost any other app on your PC. The old-version trick asks you to run a build that AnyDesk itself has disowned, freeze it there forever, and — in most versions of the trick — download it from a stranger's file link. Here is what is actually true about those builds.
👆 After the February 2024 incident, AnyDesk revoked the certificate that signs every older build — one reason security tools treat pre-8.0.8 installs as suspect.
On 2 February 2024, AnyDesk publicly disclosed that attackers had compromised its production systems. As part of the response, the company revoked its code-signing certificate — the digital signature that proves an AnyDesk file genuinely comes from AnyDesk — and reissued everything under a new certificate and a new publisher name (AnyDesk Software GmbH, replacing philandro Software GmbH).
AnyDesk's own guidance at the time was direct: update to the fixed builds (8.0.8 on the new line, 7.0.15 on the old line) and download only from official sources. Every installer shared around the internet as the "popup-free old version" predates that line — it is signed with a certificate the maker itself no longer trusts.
The signature on a program is how Windows — and you — know the file is genuine and untouched. Once the signing certificate is revoked, an old installer can no longer prove it is the real thing, and security software is right to treat these builds as compromise indicators; incident-response guides literally list "AnyDesk older than 8.0.8 still installed" as something to hunt down and remove.
And that is before the ordinary problem: an old version never gets patched again. Every vulnerability discovered in that build after its release stays open on your machine, in a program designed to accept connections from the internet. Turning off automatic updates — the second half of the trick — locks that door open permanently.
Notice where the old-version trick sends you: not to anydesk.com, which keeps only current builds, but to file-sharing links, video description links and repack sites. AnyDesk explicitly warned users during the 2024 incident not to download its software from third-party sources.
The reason is simple economics. A "free old AnyDesk, no popups" file is perfect bait: the person downloading it wants a remote-access tool, will run it with administrator rights, and will even disable its updates — which also disables its ability to become safe later. If you have already installed such a file, the honest advice is to remove it completely (the clean uninstall guide in this series shows how), run a full antivirus scan, and install fresh from the official website if you still want AnyDesk.
Every one of these ends the popup. None of them asks you to run disowned software on the PC your whole life passes through.
The full AnyDesk popup video — every step shown live, step-by-step.
▶️ Watch Full VideoAnyDesk directed users to version 8.0.8 or later (or 7.0.15 on the older line), which carry the new code-signing certificate. Anything older is signed with the revoked certificate, and AnyDesk's advice was to update and to download only from official sources.
Three stacked risks: the file cannot prove it is genuine since its certificate was revoked; known vulnerabilities in that build will never be patched, especially with updates disabled; and if the installer came from a file-sharing link, it may not be the original program at all. For software that can control your PC remotely, that combination is serious.
A vendor can retire old clients from its network, and AnyDesk has tightened requirements around major incidents before. Even if an old build connects today, building your routine on a version the maker has disowned means it can stop working — or be found unsafe — at any time.