Forums Security analysis Orphan.MUICache, Software potentially superfluous (LPS).

Keywords : , , ,

Viewing 1 Message (on 1 total)

Download more 1200 Software on their official website !

  • Author
    Messages
  • Nicolas CoolmanNicolas Coolman
    • Administrator
    @nicocoolmann
    Nombre d'articles : 2433

    Logiciel Superflu

    Orphan.MUICache, Software potentially superfluous (LPS).

    Some programs or applications such as Orphan.MUICache may be termed superfluous. It mainly legitimate programs that are not necessarily needed for the proper functioning of your system.

    They install themselves as a program and/or as a browser extension. They can start automatically from the registry via a key "Run", a service or scheduled task. It can begin to start your browser after changing its settings. Sometimes the launch is done silently, that is to say that he works in the background. Viral analysis of this software does not show malicious detection. Learn more

    The Windows operating system uses a registry key called MUICache every time you start using a new app. This key is located in the " User » (HKU/HKCU) the registry.

    With each process name that launches the app, a registry key value is thus created in the key " MUICache "Of the Shell Windows.
    It stores it as a given, The name of the process supplemented by an extension to the " .FriendlyAppName «and «» .AppCompany« .

    Example with the launch of the KeePass Password Safe app :
    [HKCU-Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\Program Files (x86)\KeePass Password Safe 2-KeePass.exe.FriendlyAppName
    [HKCU-Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\Program Files (x86)\KeePass Password Safe 2-KeePass.exe.ApplicationCompany

    ZHPDiag and ZHPCleaner allow the listing of all "register key values" MUICache« , so you can delete values that correspond to malicious applications, superfluous or deleted.

    When an app is removed, The corresponding registry key value is not automatically destroyed by the system. So you can find with several tens/hundreds of orphan values.
    In that case, The lines are categorized as ' Extra. Orphan.MUICache« , i.e. in superfluous and orphans (Extra"Superflue", OrphanOrphaned)

    When the application process is not signed, i.e. he does not have an identified certificate, the line is commented with the term " .Unsigned« .

    It should be noted that there are also software programs such as MUICacheView NirSoft to manage the MUICache key in an interface.

    Main Shares :
    – Creating multiple "Software" Registry Keys in the HKU branch,
    – Creating multiple "Software" Registry Keys in the HKCU branch,

    Overview ZHPDiag :
    [HKCU-Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\Program Files (x86)\KeePass Password Safe 2-KeePass.exe.FriendlyAppName>.Extra. Orphan.MUICache
    [HKCU-Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\Program Files (x86)\KeePass Password Safe 2-KeePass.exe.ApplicationCompany>.Extra. Orphan.MUICache
    [HKCU-Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\Program Files (x86)\ZedTV-zedtv.exe.FriendlyAppName>.Extra. Orphan.MUICache
    [HKUS-1-5-21-<…>\Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\services-officeof-Office-Winword.exe.FriendlyAppName>.Unsigned
    [HKUS-1-5-21-<…>\Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\services-officeof-Office-Winword.exe.ApplicationCompany>.Unsigned
    [HKUS-1-5-21-<…>\Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\services/officeof-Office-excel.exe.FriendlyAppName>.Unsigned
    [HKUS-1-5-21-<…>\Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\services-officeof-Office-excel.exe.ApplicationCompany>.Unsigned
    [HKUS-1-5-21-<…>\Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\services/officeof-Office-PowerPnt.exe.FriendlyAppName>.Unsigned
    [HKUS-1-5-21-<…>\Software-Classes-Local Settings-Software-Microsoft-Windows-Shell-MuiCache]:C:\servicesbureausofOfficePowerPnt.exe.ApplicationCompany =>.Unsigned

    Alias:
    Extra. Orphan.MUICache

    Diagnose with ZHPSuite..  Uninstall with Windows..  Delete with ZHPCleaner..  Delete with Malwarebytes..

Viewing 1 Message (on 1 total)
  • You need to be logged in to answer about it.