hwinfo64a_163.sys being flagged by anti virus tools.

[Kol12]

appdata\local\temp\hwinfo64a_163.sys. Some anti virus tools are flagging this as a threat. Does Martin know anything about this?

 

[Martin]

Nowadays antivirus software is flagging lots of safe software, so I'm not surprised. Which antivirus is saying this? You should submit them a review request.

 

[Kol12]

Sysinternals Autoruns flags them as not verified.

 

[Martin]

I don't know what "Verified" means in Autoruns, but the HWiNFO driver is properly digitally signed by Microsoft:




Locate the driver file on your disk and right-click Properties -> Digital Signatures

 

[Kol12]

What is that HWiNFO file in AppData/Local/Temp anyway?

 

[Martin]

The HWiNFO kernel driver needed to access hardware.

 

[Kol12]

My certificate for the HWiNFO kernal driver is the same as yours and valid so I don't know why autoruns flags it as not verified.