Problem with the same program being detected over and over.

[TheSilverHammer]

I got a HP color printer and it has installed some app, hpbdfawep.exe that
keeps adding itself to the run registry each time I boot. The problem is
that windows defender keeps asking me to approve the changes. Even though I
permit it, the next time I boot, windows defender wants my approval AGAIN.

How can i tell it to ignore this program? BTW it is unsigned which may be
part of the problem. This is driving me nuts. I do not see a way to add it
to the allowed programs to stop hassling me about it every time I reboot.

 

[1PW]

I got a HP color printer and it has installed some app, hpbdfawep.exe that
keeps adding itself to the run registry each time I boot. The problem is
that windows defender keeps asking me to approve the changes. Even though I
permit it, the next time I boot, windows defender wants my approval AGAIN.

How can i tell it to ignore this program? BTW it is unsigned which may be
part of the problem. This is driving me nuts. I do not see a way to add it
to the allowed programs to stop hassling me about it every time I reboot.

Hello:

This is probably not a problem with Windows Defender as a peripheral's
support software is trying to install that executable every time you reboot.

HP has support forums that can probably help you better. However, this
time remember to include a great deal more fine detail than you provided
here for the best possible solution; OS, printer, etc

HTH

Pete

 

[1PW]

I got a HP color printer and it has installed some app, hpbdfawep.exe that
keeps adding itself to the run registry each time I boot. The problem is
that windows defender keeps asking me to approve the changes. Even though I
permit it, the next time I boot, windows defender wants my approval AGAIN.

How can i tell it to ignore this program? BTW it is unsigned which may be
part of the problem. This is driving me nuts. I do not see a way to add it
to the allowed programs to stop hassling me about it every time I reboot.

Hello:

This is probably not a problem with Windows Defender as a peripheral's
support software is trying to install that executable every time you reboot.

HP has support forums that can probably help you better. However, this
time remember to include a great deal more fine detail than you provided
here for the best possible solution; OS, printer, etc

HTH

Pete

 

[TheSilverHammer]

Allright... Windows Vista Ultimate 64 Bit, Printer HP LaserJet CP1215.

It should not matter what windows or printer. If I have program X, and I
say, program X is OK, then it should STOP BUGGING ME. There is this list of
approved programs. It Is empty. I have NO IDEA how to add a program to
that list. I would very much like to add this program to that list. There
is no help on how to do that.

How hard is it to identity a program? OK, take an MD5 and a SHA hash of the
thing. Now if the same program of the same name, time-stamp, size, MD5, and
SHA keeps being approved, it is safe to say that the user would prefer not to
be hassled by it. You can be quite sure it *is* the same program after all.
In fact, the OS can know if it changed.

I even have the same suggestion of UAC. If I flag a program to run as
admin, the OS should only bother my ONCE. Not every time I launch it. It
can know weather the application has been modified or not. MD5s, SHA,
secret Microsoft stuff... it can know.

Maybe if I ignore it, it will give up.

 

[TheSilverHammer]

Allright... Windows Vista Ultimate 64 Bit, Printer HP LaserJet CP1215.

It should not matter what windows or printer. If I have program X, and I
say, program X is OK, then it should STOP BUGGING ME. There is this list of
approved programs. It Is empty. I have NO IDEA how to add a program to
that list. I would very much like to add this program to that list. There
is no help on how to do that.

How hard is it to identity a program? OK, take an MD5 and a SHA hash of the
thing. Now if the same program of the same name, time-stamp, size, MD5, and
SHA keeps being approved, it is safe to say that the user would prefer not to
be hassled by it. You can be quite sure it *is* the same program after all.
In fact, the OS can know if it changed.

I even have the same suggestion of UAC. If I flag a program to run as
admin, the OS should only bother my ONCE. Not every time I launch it. It
can know weather the application has been modified or not. MD5s, SHA,
secret Microsoft stuff... it can know.

Maybe if I ignore it, it will give up.

 

[1PW]

Allright... Windows Vista Ultimate 64 Bit, Printer HP LaserJet CP1215.

It should not matter what windows or printer. If I have program X, and I
say, program X is OK, then it should STOP BUGGING ME. There is this list of
approved programs. It Is empty. I have NO IDEA how to add a program to
that list. I would very much like to add this program to that list. There
is no help on how to do that.

I'm in total agreement with you.

How hard is it to identity a program? OK, take an MD5 and a SHA hash of the
thing. Now if the same program of the same name, time-stamp, size, MD5, and
SHA keeps being approved, it is safe to say that the user would prefer not to
be hassled by it. You can be quite sure it *is* the same program after all.
In fact, the OS can know if it changed.

I even have the same suggestion of UAC. If I flag a program to run as
admin, the OS should only bother my ONCE. Not every time I launch it. It
can know weather the application has been modified or not. MD5s, SHA,
secret Microsoft stuff... it can know.

Maybe if I ignore it, it will give up.

Hello:

<http://h30434.www3.hp.com/psg/board?board.id=Software>

The above is the URL to the support forum where another opinion might be
helpful.

I haven't found anyone else who has a similar problem. With little more
the a hunch, I'm tending to theorize a shortcoming in the install
software for your printer. However, it might be helpful to you, and
others who will help, if you do a "sfc /scannow" on your OS followed by
a uninstall/reinstall of your HP support software.

May we assume that your system is completely up to date with patches and
updates?

HTH

Pete

 

[1PW]

Allright... Windows Vista Ultimate 64 Bit, Printer HP LaserJet CP1215.

It should not matter what windows or printer. If I have program X, and I
say, program X is OK, then it should STOP BUGGING ME. There is this list of
approved programs. It Is empty. I have NO IDEA how to add a program to
that list. I would very much like to add this program to that list. There
is no help on how to do that.

I'm in total agreement with you.

How hard is it to identity a program? OK, take an MD5 and a SHA hash of the
thing. Now if the same program of the same name, time-stamp, size, MD5, and
SHA keeps being approved, it is safe to say that the user would prefer not to
be hassled by it. You can be quite sure it *is* the same program after all.
In fact, the OS can know if it changed.

I even have the same suggestion of UAC. If I flag a program to run as
admin, the OS should only bother my ONCE. Not every time I launch it. It
can know weather the application has been modified or not. MD5s, SHA,
secret Microsoft stuff... it can know.

Maybe if I ignore it, it will give up.

Hello:

<http://h30434.www3.hp.com/psg/board?board.id=Software>

The above is the URL to the support forum where another opinion might be
helpful.

I haven't found anyone else who has a similar problem. With little more
the a hunch, I'm tending to theorize a shortcoming in the install
software for your printer. However, it might be helpful to you, and
others who will help, if you do a "sfc /scannow" on your OS followed by
a uninstall/reinstall of your HP support software.

May we assume that your system is completely up to date with patches and
updates?

HTH

Pete

 

[Bill Sanderson]

Please check that your printer driver software is current. HP has a
downloadable app that will check that for some of its printers--see if it is
offered if you search at hp.com for drivers for your printer and OS version.

You can exclude folders from scanning by Windows Defender, via UI in tools,
options (remember to scroll down.) That is the option that may work in this
instance--you cannot directly add apps to the approved programs list. You
might also check in tools, options to see if you've turned on notifications
beyond the defaults. It is also possible to turn off specific Defender
checkpoints.

There used to be an article on how to use a Microsoft tool to do what you
mention with regards to UAC. I don't think it is available now, but there
are probably versions of it on the web, and the tool is still
available--that isn't relevant at all to the Defender question, though.

I completely understand that the behavior is frustrating, and also that it
seems counterintuitive that the user can't add apps to the list you mention,
but that isn't how it works, I'm afraid. Your comment about "ignoring it"
is spot on--you essentially have to tell Windows Defender to ignore the area
this program loads from, which definitely creates a hole in security..... I
see very few messages like this these days, though, which makes me think
that if your drivers were current the issue might go away.

 

[Bill Sanderson]

Please check that your printer driver software is current. HP has a
downloadable app that will check that for some of its printers--see if it is
offered if you search at hp.com for drivers for your printer and OS version.

You can exclude folders from scanning by Windows Defender, via UI in tools,
options (remember to scroll down.) That is the option that may work in this
instance--you cannot directly add apps to the approved programs list. You
might also check in tools, options to see if you've turned on notifications
beyond the defaults. It is also possible to turn off specific Defender
checkpoints.

There used to be an article on how to use a Microsoft tool to do what you
mention with regards to UAC. I don't think it is available now, but there
are probably versions of it on the web, and the tool is still
available--that isn't relevant at all to the Defender question, though.

I completely understand that the behavior is frustrating, and also that it
seems counterintuitive that the user can't add apps to the list you mention,
but that isn't how it works, I'm afraid. Your comment about "ignoring it"
is spot on--you essentially have to tell Windows Defender to ignore the area
this program loads from, which definitely creates a hole in security..... I
see very few messages like this these days, though, which makes me think
that if your drivers were current the issue might go away.