Service names such as MpKsl15169faf and MpKsl48db6a65 for event 7045

Veena Sagar 61 Reputation points
2020-11-13T07:34:24.567+00:00

Hi,

For event 7045 (A service was installed in the system), we have been getting random service names such as MpKsl15169faf and MpKsl48db6a65. Though, the process gets installed is C:\ProgramData\Microsoft\Windows Defender\Definition Updates{A76DCDD6-5A5C-4943-BE71-929C9036EAA3}\MpKslDrv.sys. which seems legit.

Is this something to be concerned about?

Regards,
Veena

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,909 questions
{count} votes

Accepted answer
  1. Jenny Feng 14,131 Reputation points
    2020-11-16T01:54:39.817+00:00

    @Veena Sagar
    Hi,

    The event ID you have mentioned above generates when a service was installed in the system.
    If there is no other effect, I think this problem can be ignored.

    Hope above information can help you.

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


1 additional answer

Sort by: Most helpful
  1. Veena Sagar 61 Reputation points
    2020-11-18T08:18:17.237+00:00

    Hi Jenny,

    Thank you for the information. But, these random names seem to be logged everyday.
    For each day, name differs. Mpksl followed by a bunch of random names and alphabets.

    Sorry for the delay.

    Regards,
    Veena


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.