hdwwizb.exe ?

[Spottedfeather]

For the last week or so, since I installed AVG, I've been getting alerts that it found a file called hdwwizb.exe that isn't right. What can I do to make this stop ? Is the file something bad and is just being flagged incorrectly ? Is there any way to get AVG free to ignore the file ?

 

[The Howling Wolves]

Are you sure you copied the error correctly?
The error looks like a driver error. Have you updated all the drives recently?
IMO....I would uninstall AVG and download Avast or MSE as your AV program and see if error comes up then.
Both of these AV programs are free.

 

[DocBrown]

It might be spyware. Try Free version of MalwareBytes

 

[Jacee]

Run Malwarebytes' Anti-Malware to see if it picks it up too. It could be a 'false/positive' ...

Download Malwarebytes' Anti-Malware to your desktop
|MG| Malwarebytes Anti-Malware 1.46 Download
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.

* When completed, a log will open in Notepad. Please save it to a convenient location. Copy and Paste that log into your next reply.

 

[The Howling Wolves]

I am outranked..................Run Malwarebytes first .....Then get rid of AVG IMO

 

[Jacee]

Pretty sure it's a Trojan ... it has a "b" at the end.

Hdwwiz.exe helps you install driver software to support older devices that do not support Plug-and-Play

 

[Corrine]

Pretty sure it's a Trojan ... it has a "b" at the end.

Looks like it. From Prevx:

The filename is associated with the malware groups:

• Cloaked Malware
• Malicious Software

 

[Spottedfeather]

Malwarebytes didn't find it....

Malwarebytes' Anti-Malware 1.46
Malwarebytes

Database version: 4408

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

8/8/2010 11:25:59 PM
mbam-log-2010-08-08 (23-25-59).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 263734
Time elapsed: 41 minute(s), 18 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\Spottedfeather\AppData\Local\Temp\trc3ns.exe (Virus.Agent) -> No action taken.

 

[Spottedfeather]

I have never update any drivers. It's a new computer.

 

[Spottedfeather]

I tried Malwarebytes, but it's a stupid program. When it was finished, and I removed what it found, it made my computer restart. I was in the middle of something. I looked but I didn't see anything about an option to restart the computer or not. If it's going to do this, I'm getting rid of it.

 

[thathagat]

I tried Malwarebytes, but it's a stupid program. When it was finished, and I removed what it found, it made my computer restart. I was in the middle of something. I looked but I didn't see anything about an option to restart the computer or not.

hi.........Files Infected:
C:\Users\Spottedfeather\AppData\Local\Temp\trc3ns.exe (Virus.Agent)

be glad that mbam removed this nasty residing in temp file....and certain infections require a reboot to be completely resolved....

 

[Night Hawk]

I have to agree with Jaycee about it being a hidden malware of some type since no search engine can produce results with the "b" letter added into the file name. Besides Malwarebytes there are alternative removers as well as removal tools unless you simply delete the file once located manually.

AVG should have provided the location in the alert on it. "b.exe" is malware when found. One free tool won't require you to remove AVG since that alerted you to this. The VIPRE Rescue Program is a stand alone type scanner/remover that simply unpacks and runs from a temp folder for serious infections. VIPRE Rescue - VIPRE Computer Recovery Solution from Sunbelt Software

When comparing Malwarebytes to Spyware Terminator some time back the ST program located and removed data miners not even seen by the other. Free spyware removal and spyware protection - Spyware Terminator

Previously that had been run along with AVG and the IE security bar until going with a newer software found more effective. Since you are running AVG already having the toolbar option enabled will alert you to bad sites to keep things off while the need for a good firewall would also be a help.

 

[Corrine]

From the MBAM log:

Files Infected:
C:\Users\Spottedfeather\AppData\Local\Temp\trc3ns.exe (Virus.Agent) -> No action taken.

It is necessary to check the items detected in order to provide permission to MBAM to remove the file(s). If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. MBAM will also provide a prompt to restart the computer, which is necessary to do so immediately.