[joseph456]

Not sure if this is malware related but everytime I boot my laptop I see this message "The description for Event ID 0 from source igfxCUIService1.0.0.0 cannot be found."  When I did a search on it I saw everything from reloading graphics drivers to possible malware.  No one seems to know how to fix it.  Thanks for your help.

[Advertisements]

igfxCUIService1.0.0.0

 

Relates to the Intel® Common User Interface which installs alongside drivers for Intel® graphics cards and onboard graphic processor units (GPUs)

 

https://www.file.net...ervice.exe.html
https://shouldiblock....exe-54346.aspx
http://processchecke...ervice.exe.html

 

This service is known to throw errors, but unless it's causing you problems (other than the annoying messages on bootup), then there's probably no need to take any action.

 

In any case, it is not Malware related, so is outside of the scope of the "Virus, Spyware, Malware Removal" forum, and you need to seek assistance in the forum appropriate to your OS ... http://www.geekstogo...rating-systems/

 

[Gary R]

igfxCUIService1.0.0.0

 

Relates to the Intel® Common User Interface which installs alongside drivers for Intel® graphics cards and onboard graphic processor units (GPUs)

 

https://www.file.net...ervice.exe.html
https://shouldiblock....exe-54346.aspx
http://processchecke...ervice.exe.html

 

This service is known to throw errors, but unless it's causing you problems (other than the annoying messages on bootup), then there's probably no need to take any action.

 

In any case, it is not Malware related, so is outside of the scope of the "Virus, Spyware, Malware Removal" forum, and you need to seek assistance in the forum appropriate to your OS ... http://www.geekstogo...rating-systems/

 

[joseph456]

Thanks for your quick response. 

 

I just checked at the first link and it said:

 

"Important: Some malware camouflages itself as igfxCUIService.exe, particularly when located in the C:\Windows or C:\Windows\System32 folder. Therefore, you should check the igfxCUIService.exe process on your PC to see if it is a threat."

 

How would I know if malware is camouflaging itself as this service?  The first link provided a program to use but I am not sure it is safe.  I have MSE and MB and have run them both recently with no issues.  Would they detect this issue?

Edited by joseph456, 25 February 2019 - 12:04 PM.

[Gary R]

If you want to check out the igfxCUIService.exe file on your computer, please do the following ...

Depending on whether you're using a 32 bit version of Windows or a 64 bit version of Windows ...

• Download FRST to your Desktop.
• Download FRST64 to your Desktop.

If you don't know, download both, only one of them will run.

• Double click Frst.exe or Frst64.exe to launch it.
• FRST will start to run.
  
• When the tool opens click Yes to the disclaimer.
• Copy/Paste or Type the following line into the Search: box.

igfxCUIService.exe

• Press the Search Files button.
• When finished searching a log will open on your Desktop ... Search.txt
• Please post it in your next reply.

 

[joseph456]

Here is the search txt.

 

Thanks.

 

Farbar Recovery Scan Tool (x64) Version: 25.02.2019 01
Ran by EJC (25-02-2019 19:34:23)
Running from C:\Users\EJC\Desktop
Boot Mode: Normal

================== Search Files: "igfxCUIService.exe" =============

C:\Windows\System32\igfxCUIService.exe
[2014-05-17 00:30][2018-04-26 15:29] 000343016 _____ (Intel Corporation) C85AD92B63DC9E626D957C871A203869 [File is digitally signed]

C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_neutral_4f453ee27fb8b1df\igfxCUIService.exe
[2018-04-26 15:29][2018-04-26 15:29] 000343016 _____ (Intel Corporation) C85AD92B63DC9E626D957C871A203869 [File is digitally signed]


====== End of Search ======

[Gary R]

OK, as you can see, the file is digitally signed by Intel, and so is the genuine one.

 

As a further check, if you look up the file hash given in Search.txt (which identifies the file uniquely) at VirusTotal, you get ... https://www.virustot...b21c1/detection

 

I'm confident you do not have an infection.

 

To uninstall FRST, please do the following ....

 

 

• Rename Frst.exe or Frst64.exe to Uninstall.exe
• With the computer booted into Normal Mode run the renamed Frst.
• The computer will reboot, and on boot up will delete ...
• %systemdrive%\FRST
• and from the directory from which Frst is run, it will delete ...
• Search.txt
• The tool itself

 

[joseph456]

Thanks for the clarification.  I have a better understanding now.  Will attend to this tonight.

[Gary R]

You're welcome.

 

Glad to help.

[Gary R]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.