Home Support

AVG Support Community

Share tips and solutions on AVG Products

Have a question?

Community topics

AVG Gurus

These community experts are here to help

  • (AB) Alan Binch
  • (BA) Borislav Angelov
  • (VB) Vladimir Bartl
  • (SK) Subhadeep Kanungo
  • (MS) Miloslav Serba
Linda DayLinda Day 

Win32/Heri error?

I keep getting this (frustrating) message, regarding a Win32/Heri issue, and the AVG Antivirus programme seems to be having difficulties dealing with it.

Any advice on how to deal with this, please?

Kind regards,

-980888528-980888528 (Avast)
Hello Linda,
We will check and help you with it.
Please share the screenshot http://support.avg.com/SupportArticleView?urlname=How-to-create-a-screenshot of threat detection message you received with its full path.
Click on "See Details" at the bottom right corner of that popup to view its full path.
Louise WorsleyLouise Worsley
I am also getting this since 26th November
-980888528-980888528 (Avast)
Could you share the screenshot of it to have better understanding? 
Do you have the latest version of AVG Internet Security/ Antivirus ? 
Open Antivirus -> Menu -> About -> check its version, it should  be 18.8. 
Jens WargenauJens Wargenau
Same here, several times already AVG AntiVirus detected various instances of Win32/Heri, deleted them, but after a while they reappear. It's always several instances at the same time, never just one.
AvinashAvinash (Avast) 
Jens, if you are a paid user, please visit http://avgclick.me/AVGtechnical for technical assistance. If you are using a free version of AVG, please post your own query to gather necessary information about the pop up.
Shelley CShelley C
Hi, I'm having a similar issue just now. It appears to replicate itself during the quarantine process and keeps popping up. I've read elsewhere in the support area that this may be a false positive. What do we need to do to be certain there is no threat before continuing on with our business? If it helps, I checked the system and I'm currently running AVG AntiVirus Free Edition, Version 16.161.8048. Thanks for any help available!
Santhosh PannerselvamSanthosh Pannerselvam (AVG)
Hi Shelley,

Please provide us the screenshot of the issue.
Manasseh KatzManasseh Katz
I am having the same problem with AVG Internet Security. w32 heri dropper g2mupdate error
Alok KumarAlok Kumar (Avast)
Hello Manasseh,
We will help you sort it out. Your computer is secured because the threat is already quarantined. It seems you're using our very old version of AVG Internet Security.
We request you to uninstall it from control panel > program and features and click here for the instruction to install our latest version of AVG Internet Security.
Manasseh KatzManasseh Katz
w32 heri dropper g2mupdate error
Margaret GreenMargaret Green
Also getting this, on the paid version after it was updated in Nov, happens every time I wake from hibernate or start computer - so can be multiple times a day.  Multiple locations, nothing works!  Fixing it over and over doesn't work, ignoring each one doesn't work (that seems to make it worse), in the middle of teaching this is a problem!  Seems to always be a temp directory, the webex directory and a few others - always same locations.
Alok KumarAlok Kumar (Avast)
Hello Margaret,
We request you to connect with our chat support team ( https://support.avg.com/support_sales?l=en ) to sort it out.
Neil WoodmanNeil Woodman
I too am getting this problem there are three instances and they are apparently located in the AVG "setup" folder
AvinashAvinash (Avast) 
Neil, if you are paid user of AVG, please get in touch with our technical support team (http://avgclick.me/AVGtechnical) for help.
Drew ChapmanDrew Chapman
I too am getting this error and everytime I restart there are more of the win32\heri file.
Priyanga SekarPriyanga Sekar (Sitel)
Hi Drew, 

We will help you to sort it out. Let us know the version of AVG Internet Security/AVG AntiVirus free installed on your PC.  To find: Open AVG Internet Security > Menu > About. 

If possible, provide the screenshot (https://support.avg.com/SupportArticleView?l=en&urlname=How-to-create-a-screenshot) of the page with this pop-up to assist you further.

Thank you.  
Kenneth HoKenneth Ho
Hi, I'm having a similar issue just now.
Win32_Heri error from Kenneth Ho
Kenneth Ho
Priyanga SekarPriyanga Sekar (Sitel)
Hi Kenneth, 

We replied to your original post and revert to us to get further assistance. 

Thank you.
Mark HepburnMark Hepburn
Hello AVG Team,

I have a similar problem. My AVG Version is 18.8.3071 AVG Antivirus Free
User-added image
Priyanga SekarPriyanga Sekar (Sitel)
Hi Mark, 

We will certainly take a look into this for you. 
Please go to the specified location(HTMLayout.dll, Instup.dll, AvDump32.exe) and move the folders to your desktop. Zip the folders and once they are ready, create a new post and contact us. 
We will then send you an e-mail and revert to us with the attachment. 
This will help us to analyze the issue further and work on a solution. 
Thank you.
Leti MonteLeti Monte
I am also experiencing the same issue. My AVG antivirus free is 18.8.3071 version.
User-added image
I tried to update the AVG but it would not run the programme downloaded.
Thank you.
AvinashAvinash (Avast) 
Leti, please get in touch with our technical support (http://avgclick.me/AVGtechnical) for help to resolve this issue.
Lisa GryffythsLisa Gryffyths
Hi, I'm also experiencing this issue with the Win32/Heri threat being detected everyday, no matter if I choose protect me or Ignore threat. My AVG antivirus free is 16.161.8048 version. Thank you.User-added image
Lisa GryffythsLisa Gryffyths
I'd also like to add that I tried installing the latest version and got the error below. Your site says that installing a never version will just write over the older version, do I need actually to uninstall the old version? Is it safe to do that while I'm getting these threats about the Win32/Heri?User-added image
Balasubramanian SBalasubramanian S (Avast) 
Hi Lisa,

We realize the situation.
Let us investigate the threat detected file and then proceed with the reinstallation.
Click on "Show Details" of threat detection window and provide its screenshot here.
Thank you.
Scott Van AartsenScott Van Aartsen
Same issue. Crazy thing is, when I get to the temp folder where the file supposedly is, there is no folder of that name and no file like that. It seems to be an AVG file. Perhaps this is a bug?
KarthikeyanKarthikeyan (Avast) 
Hello Scott,

I will help you further.

This issue is caused due to the presence of old AVG traces on your computer.

I have sent you an email, please follow the steps from the email to get connected with our advanced support for further assistance.
Steve PeoplesSteve Peoples

We are having the same Win32/Heri issues.  What is the solution please?

User-added image 

KarthikeyanKarthikeyan (Avast) 
Steve, that's unfortunate.

Please contact our chat support https://support.avg.com/support_tech_chat and they will assist you further with this threat issue.
Lisa GryffythsLisa Gryffyths
Thanks Balasubramanian,
Here's the other details screen you requested. Also I noticed that trying to run the newest AVG installer causes the Win32/Heri threat to immediatly come up from my current AVG. User-added image
Balasubramanian SBalasubramanian S (Avast) 
Lisa, do you mean that you have both the old and new version of AVG Antivirus free installed on your PC?
We request you to run this https://files-download.avg.com/filedir/util/AutoExec.exe tool.
Run the file and click on "Scan Hashes with Virus total".
Once the scan has been completed, check the entire list and the rating for each entry should be 10 and above. 
You can also click on "File" at the top and save the scan list on your desktop.
If you confirm that no entry crosses above 10, then you can proceed to uninstall your old version of AVG.
For uninstallation, refer this article (http://avgread.me/1DEtNP0).
Run AVG clear followed by remover tool as mentioned here (https://goo.gl/JDK1db) to remove the traces. NOTE: If there are no AVG program found, click on "run anyway" to proceed with the removal.
To install the latest version, refer this article (https://goo.gl/LYUXfg). 
Keep us informed about the status. 
Lisa GryffythsLisa Gryffyths
Hi Balasubramanian,
No I only have the old version installed, when I try to run the installer for the newest version it always shuts down and shows that white error box I posted earlier.

I ran the AutoExec.exe tool and clicked on "Scan Hashes with Virus total," I assume by ratings you mean the numbers under the VT column? However, these numbers are fractions, always either 1 or 0 out of a number in the 60s or 70s, does that mean they are all below 10? I've attached an image of what I mean and can also paste the lengthy text file if you want.
User-added image
KarthikeyanKarthikeyan (Avast) 
Thank you for the screenshot.

This is an incorrect detection from the older version of AVG.

You need to uninstall this older version of AVG from your computer and then initiate a new installation of latest version of AVG on your computer.

Click on this link http://download.avg.com/filedir/util/AVG_Remover.exe to download and run AVG remover tool and follow the steps from this link https://support.avg.com/SupportArticleView?urlname=Download-and-install-AVG-AntiVirus-Free to install the latest version.

If you face any difficulties, please let us know and we will assist you further.
George PalingGeorge Paling
This false detection is now fixed, devices should receive the update automatically to prevent further detection.
Thanks, George
Ask a question
Struggling with non-AVG technology? We can fix that, too!