Unsolved
1 Rookie
•
1 Message
1
160
November 20th, 2024 14:01
Wacatac malware found in DellSupportAssistRemedationService.exe
Defender finds wacatac malware in DellSupportAssistRemedationService.exe
Should I consider this as a False positive?
OS is windows 10 build 19043
No Events found!
DELL-Nat M
Community Manager
•
3.2K Posts
0
November 21st, 2024 13:58
Thank you for reporting this issue to us. Could you please update Windows to the latest version and see if that resolves the problem?
If the issue persists, could you share the following information with us:
* SupportAssist version
* Windows OS Build version (e.g., Windows 11 24H2)
*SupportAssist Remediation from add/remove programs in control panel.
Additionally, a screenshot of the error would be very helpful.
dbhin
1 Rookie
•
1 Message
0
March 10th, 2025 16:35
@DELL-Nat M I also have the same issue. CrowdStrike is detecting DellSupportAssistRemedationService.exe as a threat. Please provide a reason as to why this program would use "vssadmin.exe"
Rooted Software Service Desk
1 Rookie
•
1 Message
1
July 25th, 2025 17:16
@DELL-Nat M
Here is the MS Defender log we got. Windows 11
(edited)
gbfoc
1 Rookie
•
1 Message
0
July 29th, 2025 18:41
@DELL-Nat M I can't get all details remotely but-
Windows Version: 10.0.26100.4652
DellSupportAssistRemedationService.exe -
SHA1: 955e35a75d2813dda71af18254124041f9cfb7b7
SHA256: 3f4465b8fb3cf5db7e6fb5c3ecaafbccec35b8e25d0c758701fba21e591facee
MD5: 8c37d560440dfa7d502df9c1150fc239
Signer: Dell Technologies Inc.
As far as Support Assist version goes the device was enrolled October 22 of 2024. Unconfirmed if update has happened since then but this Dell computer was purchased the first week of October 2024.