OneApp.IGCC.WinService is a Trojan??

Question

So I found this running in the backround of taskmanager so I ended the process. After that I googled it up and saw that some websites say it was a Trojan and others say that there is nothing wrong with this exe file. I also opened it up on accident and it showed this error page. I did a reset on my pc and it was still there even after the reset. When I searched for anyone else that had the same problem nothing showed up on here so I wanted to get some straight answers. Apparently, this thing has been created since april 2nd and was modified march 4th. Some other system files show the same result too. I can't delete it even if I use file assassin or changing the ownership to me. Please help!!

I would also like to know if anyone out there with windows 10 has this same thing. The trajectory is

C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_dc7a0fe3ada1cbf5

I want to know how to get rid of it. Thanks!

Answer 1

1. https://www.mypccaresolutions.com/2020/02/26/remove-oneapp-igcc-winservice-exe-and-recover-damaged-registry-files/ is a website that tells me it is a trojan another website is this one: https://www.completepccaresolutions.com/best-way-remove-oneapp-igcc-winservice-exe-recover-damaged-registry-files/. Are you able to tell me if these websites are a fake or not?
2. There could be more websites but I do not know right now. Thank you for trying to help. I really appreciate it.

Both these sites are complete junk sites. Their main goal is to push their absolutely not recommended product (SpyHunter) onto unsuspecting help-seekers' computers.

2.

Yes there are countless more sites similar to those mentioned by you. All of those are in one way or the other connected to/sponsored by Enigma Software, the producer of that absolutely not recommended product SpyHunter.

Forget all these sites.

3.

I cannot tell you exactly what that service is but it is evidently connected to an Intel Graphics driver and  I know that I have this

on my computer, see screenshots:

-

-

4.

I am 100 % sure that I do not have any malware on my computer.

5.

You can safely assume that the file which you uploaded to VirusTotal is completely harmless.

6.

If I were you I would stop digging around in the depths of your computer and just move on with more fruitful things ;)

7.

If you still want to go digging, you could

a. analyze files here: Comprehensive List of Online File/URL analyzers & services

b. run scans with the programs mentioned here: List of Malware Removal Tools

c. ask for free expert help here: https://www.bleepingcomputer.com/forums/f/22/virus-trojan-spyware-and-malware-removal-help/

Answer 2

It's the drivers for the Intel Graphics Command center, which is commonly used in newer machines with Core i3 and newer processors.

Answer 3

Just with the name , we couldn't identify whether the file is safe or malicious.

Therefore, please upload the file to VirusTotal and see what is the result:

https://www.virustotal.com/gui/

Answer 4

https://www.virustotal.com/gui/file/7f03c481736c79f9bc854bb2f8df5d25e4facfc9b338a9fad40efffa3ba5e6a5/detection

No engines detected this file as harmful but when I searched it up on google it said that it was a Trojan.

Answer 5

The result from the VirusTotal is more reliable since it will check the actual sample and we couldn't determine whether file is safe or not just by name.

If you suspect it is malware, try submit it to Microsoft for double check and if possible please share link of websites indicating it is malware in the comment part:

https://cyberdefend.wordpress.com/2019/11/15/how-to-submit-sample-of-malicious-or-incorrect-detection-to-microsoft/