From: nospam@needed.invalid   
      
   On Wed, 2/11/2026 3:20 PM, micky wrote:   
   > I use Anvir Task Manager, which has 3 or 4 features useful to me. I'll   
   > be glad to tell you about them.   
   >   
   > One feature that tends to confuse me is that whenever something attempts   
   > to add a new startup program, it asks for my approval.  Choices are   
   > allow, quarantine, or delete.   
   >   
   > But it's hard to know what to do.   It seems that they are all legit,   
   > even if some I don't happen to want.  But there must be some evil ones   
   > running around or they wouldn't have written this code in the first   
   > place.  Today there were 5.  HOw do I know whether to accept them or   
   > not?  How do I even know if they are using their real name or the name   
   > of a good file when they are in fact malware?   
   >   
   > C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_am   
   64_6d5820df0105f0e9\   
   > C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_am   
   64_6d5820df0105f0e9\   
   > the first one twice, it seems.   
   > C:\WINDOWS\System32\DriverStore\FileRepository\igcc_dch.inf_am   
   64_bcf814bde8c7d26   
   > C:\WINDOWS\System32\DriverStore\FileRepository\cui_dch.inf_amd   
   4_0e0cef3aab259dd1\   
   > and   
   > C:\Users\mmm\AppData\Local\Microsoft\OneDrive\26.012.0119.0002   
   1\OneDriveLauncher.exe   
   > /startInstances   
   >   
      
   The INF, they should be text inside, so you could examine them with Notepad.   
   The ones with an "i" are likely for your integrated graphics. Even the cui one   
   appears to be Intel.   
      
   The OneDriveLauncher is a Microsoft item, presumably there to start OneDrive   
   early. One of its jobs might even be to check for updates for the software.   
      
   As long as these items correlate with an official activity you were   
   carrying out (you downloaded the Intel driver and then all those ones   
   started popping up), then they're likely safe. If they were popping up for   
   no reason (your hands were off-keyboard and stuff came flying in),   
   then you would be more curious about the origin.   
      
   Microsoft updates Apps all the time and the Reliability Monitor shows the   
   activity.   
   But the OneDrive, I don't know for sure whether that one is in there too.   
   OneDrive   
   got removed on my daily driver (tragic accident, OneDrive carried away on a   
   stretcher).   
      
      Paul   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)