Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
99.exe is a filename, not a unique Windows component. Different executables using that name have appeared in security databases, with different publishers, hashes, locations and behavior. One sample was flagged as potentially unwanted adware, while another showed Agent Tesla-related credential and cookie theft in a sandbox. The filename alone therefore cannot tell you whether your copy is safe.
Do not open or delete 99.exe until you identify its full path, publisher, version and SHA-256 hash. Then scan it with updated Microsoft Defender, remove any associated unwanted application, and treat phone-number pop-ups as scams rather than genuine Windows errors. The manual workflow below explains how to investigate and repair the problem without assuming every 99.exe is malware.
As an Amazon Associate I earn from qualifying purchases.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →What is 99.exe?
99.exe is simply the name of an executable file. Windows does not reserve that name for one standard service, driver or game component, so two files called 99.exe can be completely unrelated. Their hashes, metadata, locations and actions are what matter.
A herdProtect record describes a sample identified as UDa by Wenchao Zhang, version 16.6.0.9, commonly seen at C:WindowsSysWOW6499.exe. One of 68 scanners classified that sample as potentially unwanted and detected Adware.Elex (herdProtect, 2026). That is a sample-level result, not proof that every file in that folder or every file named 99.exe is harmful.
Popular on Amazon
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
ANY.RUN analyzed a different 99.exe that ran from a user’s Temp directory. Its sandbox report associated the file with Agent Tesla behavior, including browser-credential and cookie access, startup persistence and network communication (ANY.RUN). A separate MalwareBazaar record showed nine vendor detections for another 99.exe hash, while the database itself warns that inclusion does not guarantee maliciousness (MalwareBazaar, 2026).
The old Happy99.exe mail-worm is a separate, named threat from 1999. A modern file whose name is only 99.exe should not be judged by old Happy99 warnings.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Is 99.exe safe?
There is no universal safety verdict for 99.exe. A file with that name may belong to an unwanted application, a legitimate program, a damaged installation or malware. Decide from the exact file identity and behavior, not from the filename or a single database label.
- More concerning signs: the file arrived in an unexpected email, crack, keygen, unofficial download or fake support pop-up; it runs from a Temp or user-writable folder; it lacks a trustworthy digital signature; it creates startup entries or scheduled tasks; or scans show credential access, cookie theft or unexplained network traffic.
- Context that is not proof of safety: a Windows-system folder, a familiar-looking publisher name or one clean antivirus result. Malware can use misleading metadata, and legitimate software can be misclassified.
- Evidence that should be preserved: the complete path, publisher and signature status, file description, version, size, SHA-256 hash, download source, detections and any persistence or network behavior.
Use this sample comparison to see why identity matters:
| Record | Location or metadata | Observed assessment |
|---|---|---|
| UDa sample (herdProtect, 2026) | Wenchao Zhang; version 16.6.0.9; commonly C:WindowsSysWOW6499.exe |
1 of 68 scanners flagged it as potentially unwanted and detected Adware.Elex |
| Agent Tesla-related sample (ANY.RUN) | User Temp directory | Sandbox activity included browser-credential and cookie access, startup persistence and network communication |
| MalwareBazaar record (2026) | Separate 99.exe hash; exact path and publisher were not stated in the record summarized here | 9 vendor detections; MalwareBazaar cautions that database inclusion alone is not proof of maliciousness |
Why do I keep getting a 99.exe error?
An error that mentions 99.exe identifies the file involved, not the cause. Common possibilities include a damaged or incomplete application, an unwanted program trying to start, a malicious executable being blocked, a missing dependency, or a browser-based scam pretending to be Windows.
Also popular on Amazon
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
A damaged or removed application
If an installed program expects 99.exe and the file was quarantined, deleted or corrupted, Windows may show a “file not found” or startup error. Reinstall the associated program from its official source instead of downloading a replacement 99.exe from a random website.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →An unwanted program that keeps launching
Adware and potentially unwanted applications can create startup entries, display advertisements or reinstall components. Removing only the visible 99.exe may leave the parent application, scheduled task or installer behind, allowing the message to return.
Malware activity
A file that runs from Temp, appears after an unsolicited download, contacts unknown servers or accesses browser data deserves malware treatment even if the error wording looks ordinary. Do not sign in to sensitive accounts on that computer until it has been scanned.
A fake support warning
Some browser pages display a frightening “99.exe error” and a telephone number. Microsoft says genuine Windows error messages never ask you to call a technical-support number. The page is designed to make you call a scammer or install remote-access software, not to report a real Windows component failure.
How should I investigate 99.exe safely?
Start with observation. Do not double-click the file, open it from an email or allow a pop-up to launch it.
Also popular on Amazon
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
- Record where it came from. Note whether it arrived through an email attachment, a game mod, a crack or keygen, an unofficial download, a removable drive or a browser alert. Keep the original message or download page for evidence, but do not open the attachment again.
- Open file properties without running it. In File Explorer, right-click the file, choose Properties, and record the full path, file description, product name, version, size and the Digital Signatures tab if present. A missing signature is a warning, not an automatic malware verdict.
- Copy the SHA-256 hash. Open Windows Terminal or PowerShell and run the command below, replacing the example path with the exact location. Hashes let a technician or security service distinguish files that share the same name.
Get-FileHash -Algorithm SHA256 -LiteralPath 'C:pathto99.exe'Save the output with the date and the file’s path. Do not upload a sensitive or proprietary executable to a public service without permission from the owner or your organization’s security team.
How do I scan 99.exe with Microsoft Defender?
Use Windows Security after updating its security intelligence. A full scan checks all local files and running programs; Defender Offline is useful when a threat persists or appears to evade a normal scan.
- Open Windows Security from the Start menu.
- Select Virus & threat protection, then choose Protection updates and select Check for updates. Install the latest security intelligence.
- Return to Virus & threat protection, choose Scan options, select Full scan, and start the scan. Leave the computer powered on until it finishes.
- Review Protection history. For a detection, choose the available action such as quarantine or remove, and note the detection name and affected path.
- If the detection returns, normal scanning cannot remove it, or the file appears to start before Windows fully loads, reopen Scan options, select Microsoft Defender Offline scan, and start it. Windows restarts and scans before the usual desktop loads; save work first.
Microsoft also accepts suspicious-file submissions for review. Submit only a copy you are authorized to share, and retain the hash and detection details so the result can be matched to the correct sample.
How do I remove the program behind 99.exe?
Remove the associated application rather than deleting an arbitrary executable from a system directory. Deleting the wrong file can break a legitimate program without removing the startup mechanism that caused the error.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors- Open Settings > Apps > Installed apps (called Apps & features on some older Windows 10 builds).
- Sort by installation date and look for software installed just before the 99.exe message began. Check the publisher and uninstall only software you recognize as unwanted or that your administrator has approved for removal.
- Restart Windows, run another Defender full scan, and review Protection history.
- In Windows Security, open App & browser control > Reputation-based protection. Enable blocking for potentially unwanted apps and downloads where your Windows edition exposes those controls. This helps prevent the same installer from returning, but it does not replace antivirus scanning.
If uninstalling fails, boot into Safe Mode only when you understand which application you are removing or are following trusted professional guidance. Do not download a replacement 99.exe from a “DLL fix” or driver site.
Also popular on Amazon
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
What should I do if the 99.exe warning is a pop-up with a phone number?
Do not call the number, click the page’s “close” button if it triggers more windows, install remote-support software or give the caller access to your computer. Genuine Windows errors do not include phone numbers.
- Disconnect from the internet if you already gave the page control or downloaded a file; unplug Ethernet or turn off Wi-Fi.
- Close the browser with its normal window control. If it is frozen, press Ctrl+Shift+Esc, select the browser in Task Manager, and choose End task.
- Reopen the browser without restoring previous tabs, remove unfamiliar extensions and clear the suspicious site’s notification permission.
- Uninstall any software the caller or pop-up made you install, then update Windows and run a Defender full scan followed by Offline scan if the behavior persists.
How do I protect accounts after a suspected 99.exe compromise?
If the file may have accessed browser credentials or cookies, stop entering passwords, payment details or work credentials on the affected computer until scanning is complete.
- From a different, trusted device, change passwords for email, banking, game platforms and any account that was active in the browser. Start with the email account because it can reset other passwords.
- Turn on two-factor authentication wherever it is offered, preferably with an authenticator app or security key rather than text messages when your service supports stronger methods.
- Sign out of other sessions and revoke unfamiliar application tokens or browser sessions in each account’s security settings.
- Contact your bank or payment provider if financial details may have been exposed. The FTC recommends stopping sensitive logins, updating security software, scanning, changing passwords and enabling two-factor authentication after suspected malware exposure.
When should I reset Windows or seek professional help?
Escalate when detections return after Defender Offline, the file recreates itself, unknown accounts or startup tasks appear, or the computer is used for sensitive work. Disconnect it from business networks and preserve the path, hash, screenshots, detection names and relevant messages before making destructive changes.
A trusted technician can determine whether the file belongs to required software and can collect evidence safely. In a serious support-scam case, Microsoft guidance allows for uninstalling scam-installed software, scanning, updating and changing passwords; a Windows recovery or reset may be appropriate when you cannot establish that the system is clean.
Before a reset, back up personal documents to media you can scan separately. Do not restore unknown executables, cracked installers or browser extensions from the backup. A reset removes local software and persistence but does not undo password theft, so account protection remains necessary.
Also popular on Amazon
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
As an optional shortcut after the manual checks, Outbyte PC Repair can look for more than 100 common Windows issues, clean temporary and cache files, review crash logs and adjust selected settings. It complements antivirus software rather than replacing it; results vary, and no tool repairs every crash. It runs on Windows 11, 10, 8 and 7, with a free trial by category for at least two days before a paid subscription.
Frequently asked questions
Can I submit a 99.exe sample to Microsoft for analysis?
Yes, Microsoft provides a suspicious-file submission route for files you are authorized to share. Include the SHA-256 hash, exact path, detection name and how the file reached the computer so the sample can be identified accurately.
What if Microsoft Defender reports no threat but 99.exe keeps returning?
Check whether the message is generated by a browser notification or a damaged application rather than the file itself. Review Installed apps, Task Manager’s Startup apps and Task Scheduler for entries created when the problem began, then run another scan after removing the associated software.
Does one antivirus detection prove that 99.exe is malware?
No. The UDa record had one potentially unwanted detection among 68 scanners, and MalwareBazaar notes that listing a sample is not by itself proof of maliciousness. Multiple independent detections, suspicious origin, persistence and observed credential or network behavior provide stronger evidence than a single label.
Should I change passwords if the file was identified only as adware?
An adware label alone does not establish that credentials were stolen. Change passwords and enable two-factor authentication immediately if the file accessed browser data, you entered credentials after the alert, or a security professional cannot rule out credential exposure.
Frequently Asked Questions
Can I submit a 99.exe sample to Microsoft for analysis?
Yes. Microsoft provides a suspicious-file submission route for files you are authorized to share. Include the SHA-256 hash, exact path, detection name and how the file reached the computer.
Recommended Free Tools
What if Microsoft Defender reports no threat but 99.exe keeps returning?
Check whether the message comes from a browser notification or a damaged application. Review Installed apps, Task Manager’s Startup apps and Task Scheduler for entries created when the problem began, then scan again after removing the associated software.
Does one antivirus detection prove that 99.exe is malware?
No. One sample had a single potentially unwanted detection among 68 scanners, and database inclusion alone is not proof of maliciousness. Independent detections, suspicious origin, persistence and observed credential or network behavior are stronger evidence.
Should I change passwords if the file was identified only as adware?
An adware label alone does not establish credential theft. Change passwords and enable two-factor authentication if the file accessed browser data, you entered credentials after the alert, or its behavior cannot be ruled out.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
