Potentially dangerous windows services

[chuck990]

Hi,

I've noticed my laptops fans spinning more than they should do for a while now; finally decided to try do something about it and have found these services which I can't disable:



They claim to be Microsoft, but I cant see Microsoft calling processes "xxxxx_bae79"... Google hasn't found anything, so I'm presuming these are bad. Any tips for removing them, Windoes Defender doesn't seem to be up to the task - I haven't really kept up to date with windows security (to my peril now seemingly), in the past I'd have used Malwarebytes. Is this still a good place to start?

Thanks all

 

[gEd]

Look bad to me.

https://blog.malwarebytes.com/101/2015/06/10-easy-steps-to-clean-your-infected-computer/

 

[Rroff]

Are you on the insider ring? I've seen some odd names sometimes in preview builds, etc. I'm assuming not if its a preinstall on an off the shelf laptop though.

 

[Orcvader]

Just had a look at mine and I have some similar services, although they end in 448f2. My work PC ends in 5ee12 so maybe it's actually normal.

Have you checked in task manager to see if there's anything using the CPU or even the GPU?

 

[andshrew]

Despite their appearance they are legitimate services. The characters at the end are generated per machine.

 

[chuck990]

This isn't a pre-install. Laptop is about 4/5 years old and originally had windows 7.

Happy to hear that those process may be normal, but I still have high CPU usage at idle which makes the machine needlessly noisy

 

[jpaul]

why do you say you cannot stop them ?
can't you trace who started them via service menu option and event manager and stop them ?

... but before that - do some more detailed analysis eg. process explorer to establish if they are using cpu/resources

 

[stockhausen]

. . . Windows Defender doesn't seem to be up to the task - I haven't really kept up to date with windows security (to my peril now seemingly), in the past I'd have used Malwarebytes. Is this still a good place to start? . . .

Download, install and run a copy of Kaspersky. You will get a 30-day trial after which you can uninstall it. It is reported as being the most reliable Anti-Virus program.

ps - there is also a free version of Kaspersky - https://www.kaspersky.co.uk/free-antivirus.

 

[mysticsniper]

If I am unable to kill and programs or processes normally. I just use PsExec, which kills them instantly.

https://docs.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite

If you feel that there programs are acting maliciously, grab the hash value and upload the value to virus total.