From Newsgroup: alt.comp.os.windows-11

I use Anvir Task Manager, which has 3 or 4 features useful to me. I'll
be glad to tell you about them.

One feature that tends to confuse me is that whenever something attempts
to add a new startup program, it asks for my approval. Choices are
allow, quarantine, or delete.

But it's hard to know what to do. It seems that they are all legit,
even if some I don't happen to want. But there must be some evil ones
running around or they wouldn't have written this code in the first
place. Today there were 5. HOw do I know whether to accept them or
not? How do I even know if they are using their real name or the name
of a good file when they are in fact malware?

C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6d5820df0105f0e9\
C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6d5820df0105f0e9\
the first one twice, it seems. C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_bcf814bde8c7d26
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_0e0cef3aab259dd1\
and C:\Users\mmm\AppData\Local\Microsoft\OneDrive\26.012.0119.0002_1\OneDriveLauncher.exe
/startInstances
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-11

On Wed, 2/11/2026 3:20 PM, micky wrote:

I use Anvir Task Manager, which has 3 or 4 features useful to me. I'll
be glad to tell you about them.

One feature that tends to confuse me is that whenever something attempts
to add a new startup program, it asks for my approval. Choices are
allow, quarantine, or delete.

But it's hard to know what to do. It seems that they are all legit,
even if some I don't happen to want. But there must be some evil ones running around or they wouldn't have written this code in the first
place. Today there were 5. HOw do I know whether to accept them or
not? How do I even know if they are using their real name or the name
of a good file when they are in fact malware?

C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6d5820df0105f0e9\
C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6d5820df0105f0e9\
the first one twice, it seems. C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_bcf814bde8c7d26
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_0e0cef3aab259dd1\
and C:\Users\mmm\AppData\Local\Microsoft\OneDrive\26.012.0119.0002_1\OneDriveLauncher.exe
/startInstances

The INF, they should be text inside, so you could examine them with Notepad. The ones with an "i" are likely for your integrated graphics. Even the cui one appears to be Intel.

The OneDriveLauncher is a Microsoft item, presumably there to start OneDrive early. One of its jobs might even be to check for updates for the software.

As long as these items correlate with an official activity you were
carrying out (you downloaded the Intel driver and then all those ones
started popping up), then they're likely safe. If they were popping up for
no reason (your hands were off-keyboard and stuff came flying in),
then you would be more curious about the origin.

Microsoft updates Apps all the time and the Reliability Monitor shows the activity.
But the OneDrive, I don't know for sure whether that one is in there too. OneDrive
got removed on my daily driver (tragic accident, OneDrive carried away on a stretcher).

Paul
--- Synchronet 3.21b-Linux NewsLink 1.2

From Newsgroup: alt.comp.os.windows-11

micky wrote:

C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6d5820df0105f0e9\
C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6d5820df0105f0e9\
the first one twice, it seems. C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_bcf814bde8c7d26
C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd64_0e0cef3aab259dd1\

Those are all intel GPU related, the other OneDrive is self explanatory.

--- Synchronet 3.21b-Linux NewsLink 1.2