New Application Version Detected

Options

I have an firewall event:


The application c:\windows\system32\ping.exe was recently updated to a new version. Bitdefender Firewall has granted access for this application.


Does this seem normal?


I know ping.exe can be modified/replace by viruses.


Should I be worried?

Comments

  • Captain Obvious
    Options
    I have an firewall event:


    The application c:\windows\system32\ping.exe was recently updated to a new version. Bitdefender Firewall has granted access for this application.


    Does this seem normal?


    I know ping.exe can be modified/replace by viruses.


    Should I be worried?


    Honestly? YES! If Windows needs to update any files or programs like that, it will do it through Windows Update.


    What you should do:


    1. Remove its access to the internet by removing the rule in Bitdefender Firewall.


    2. Do a contextual scan of the file itself and see if anything comes up.


    3. Submit the file to Bitdefender for further analysis.


    4. Remove the virus if possible. If you can't using Bitdefender, try another program such as Windows Defender Offline, or the free version of Malwarebytes.


    5. After you've removed the virus, Run the System File Checker from the command prompt. To do this, right click the command prompt, and click "Run as Administrator". Then type sfc /scannow in the command prompt and then hit Enter. This should replace and repair any damage done to the core Windows system files.