Unsolved

1 Rookie

 • 

2 Posts

22648

August 19th, 2020 07:00

file GetDockVer32w.exe it is a legit file from dell?

dell update is trying to execute/install the file GetDockVer32w.exe it is a legit file from dell?. kind of update firmware. Our security system is blocking, it is very persistent. there are several versions of the file.

Moderator

 • 

17.8K Posts

August 19th, 2020 07:00

edvega,
 
It is a DellDock firmware.
 
 

1 Rookie

 • 

2 Posts

August 25th, 2020 05:00

Thank You

1 Message

March 23rd, 2021 06:00

This file triggers an alert in Carbon Black.

Does Dell plan to sign this binary ?

1 Message

March 23rd, 2021 08:00

I agree with you. We use Carbon Black as well had to look into what this .exe was. 

3 Posts

March 26th, 2021 14:00

What is it for?

What does it do?

Do I need it?

Should I retrieve it from quarantine and install it?? BullGuard has blocked and popped it in jail a few times stating it is malware!

btw; I don't need/use a docking station.

1 Rookie

 • 

12 Posts

April 29th, 2021 01:00

We often get this message from our F-Secure Virus Scanners:

Name: Adware.ADWARE/MultiPlug.Gen7
Objekt: C:\Windows\Temp\inv4711_tmp\TBT_Dock_Firmware\GetDockVer32W.exe
Aktion: Spyware wurde vom System entfernt und unter Quarantäne gestellt.

No matter if a dock is connected or not. I suspect this happens when the Command Update util searches for Updates automatically. I wonder if Dell bundles some spyware here.

2 Posts

May 31st, 2022 16:00

Cylance also blocks this from running

Docker.png

2 Posts

May 31st, 2022 16:00

That is correct. Dell Command Update will run this during a scan using the GUI. I'm not sure if this will also trigger when running the command line but I think it does. 

PS C:\Users\me> & 'C:\Program Files\Dell\CommandUpdate\dcu-cli.exe' /scan

5 Practitioner

 • 

2.4K Posts

June 1st, 2022 19:00

Tested this with Malwarebytes, McAfee as well Norton, works fine. 

The files (as per above post) is located under Temp folder, which can be cleared without issus. 

Run > Temp > Delete all 

1 Message

September 14th, 2022 04:00

But what does it do? And if it is just for laptop dock firmware updates then I can let that stay blocked. But I need to know what it does. Thanks.

1 Message

September 16th, 2022 11:00

All Anti --Virus products I use have flagged this file as malicious. Where was this code written ? Has Dell checked the code to ensure it doesn't have any backdoors or malicious code embedded within it. Thinking about the SolarWinds attack, could this be a supply chain issue ? 

January 3rd, 2023 21:00

So what do I need to do to have it accepted as legitimate please?

 

1 Message

January 19th, 2024 15:14

getdockver32w.exe keeps crashing and we running Microsoft Security Defender. is there any updated version of this?

No Events found!

Top