Community
cancel
Showing results for 
Search instead for 
Did you mean: 
edmoncu
Novice
1,028 Views

agsrunner.bin in %programdata%\intel

Jump to solution

edmoncu_1-1626226029362.png

My security software Cynet has detected that this binary which is located at C:\ProgramData\Intel\AGS\Libs is a potentially malicious software.

 

Upon checking at virustotal, two other security softwares have detected it as well.

 

For now, i manually delete this binary file upon detection as a safety precaution. Unless you can explicitly advise if this software is legitimate and safe. Im worried about its existence because this binary is unsigned.

 

All my endpoints are running Windows 10 LTSC

 

There was an old thread discussing the same here.. but it is inconclusive and the topic was locked.

0 Kudos
1 Solution
DeividA_Intel
Moderator
478 Views

Hello edmoncu, 



Based on the research performed, I would like to let you know that the agsrunner.bin element is installed as part of Intel Graphics Command Center, specifically for the 'AutoGameSettings' component, thus Intel confirms this is a false positive and the file is indeed safe and provided by Intel. 


Intel is working on providing it with a digital signature to prevent this alert from occurring in the future (actually should be included in the next 1 or 2 driver releases), in the meantime you can safely add it to a white-list or exception list on the security software."





Regards,  

   

Deivid A. 

Intel Customer Support Technician 


View solution in original post

22 Replies
edmoncu
Novice
26 Views

Hi Deivid,

 

Looking forward to an update to a signed binary soon. Please keep us posted here.

 

Thank you.

DeividA_Intel
Moderator
22 Views

Hello edmoncu, 



Thanks for the reply, 



You will notice the change in future updates. If you do not notice this change in the next updates, I recommend you open a new thread and use this one as a reference.


In this way, it will help us to monitor this issue better, for the moment just keep your system up to date.

 




Regards,    


Deivid A. 

Intel Customer Support Technician 


Reply