camelia 6 Posted July 17, 2021 Share Posted July 17, 2021 (edited) Hello, I only accept a rule and WaasMedic_Agent.exe, suddenly Appears in my desktop, why? https://www.virustotal.com/gui/file/8cb5699f0492ce94545bddfe0e717cfd871f849a83735c911c1b618ba5c959c1/detection 8cb5699f0492ce94545bddfe0e717cfd871f849a83735c911c1b618ba5c959c1 Thanks Camelia Edited July 17, 2021 by camelia Link to comment Share on other sites More sharing options...
itman 1,538 Posted July 17, 2021 Share Posted July 17, 2021 (edited) Have no clue what could have caused WaasMedic_Agent.exe to appear on your desktop. However, there have been recent postings in regards to Eset firewall not working properly in Interactive mode. I assume you were in Interactive mode when the Eset firewall alert appeared? I would just delete the desktop entry and post back if this activity occurs for another process you create an Eset firewall rule while in Interactive mode. Edited July 17, 2021 by itman camelia 1 Link to comment Share on other sites More sharing options...
camelia 6 Posted July 18, 2021 Author Share Posted July 18, 2021 Hello, Can someone please let me know the SHA256 Checksum of the file C:\Windows\System32\WaasMedic_Agent.exe Maybe the one I have in the desktop is the good one and the the other is corrupted? A) i am paranoid B) The WaasMedic_Agent.exe is an important file, has something to do with WU Thank you Camelia Link to comment Share on other sites More sharing options...
Most Valued Members Nightowl 187 Posted July 18, 2021 Most Valued Members Share Posted July 18, 2021 1 hour ago, camelia said: Hello, Can someone please let me know the SHA256 Checksum of the file C:\Windows\System32\WaasMedic_Agent.exe Maybe the one I have in the desktop is the good one and the the other is corrupted? A) i am paranoid B) The WaasMedic_Agent.exe is an important file, has something to do with WU Thank you Camelia You can upload your version to virustotal for more checking by AV engines to be more sure It seems that this WaasMedic is related to Windows Update. camelia 1 Link to comment Share on other sites More sharing options...
camelia 6 Posted July 18, 2021 Author Share Posted July 18, 2021 17 hours ago, itman said: However, there have been recent postings in regards to Eset firewall not working properly in Interactive mode. I assume you were in Interactive mode when the Eset firewall alert appeared? Yes, I am in interactive mode when the ESET firewall alert apperead 1 hour ago, Nightowl said: You can upload your version to virustotal for more checking by AV engines to be more sure It is clean 1 hour ago, Nightowl said: It seems that this WaasMedic is related to Windows Update I know that 2 hours ago, camelia said: B) The WaasMedic_Agent.exe is an important file, has something to do with WU Is the SHA256 of the file WaasMedic_Agent.exe located in C:\Windows\System32 237E395C02F35F502432138B0ECFF71D7E84178719169AE7FE67C688B11D9829 ? Thanks Camelia Link to comment Share on other sites More sharing options...
Solution itman 1,538 Posted July 18, 2021 Solution Share Posted July 18, 2021 8 hours ago, camelia said: Is the SHA256 of the file WaasMedic_Agent.exe located in C:\Windows\System32 237E395C02F35F502432138B0ECFF71D7E84178719169AE7FE67C688B11D9829 ? That is the hash value for same file in my Win 10 x(64) 20H1 build. camelia 1 Link to comment Share on other sites More sharing options...
camelia 6 Posted July 19, 2021 Author Share Posted July 19, 2021 9 hours ago, itman said: That is the hash value for same file in my Win 10 x(64) 20H1 build. Thank you @itman Link to comment Share on other sites More sharing options...
Recommended Posts