@Veena Sagar , sorry for the vagueness of @Jenny Feng answers. Clearly, we all can see this is related to Defender, so you'd think there would be more useful answers than "start in safe mode" without Microsoft services. That is a NON-Answer, since clearly, this is a MICROSOFT issue and product (Defender). This appears to be MS Defender possibly installing a new definition file and possibly failing at installing the file. And now it is near the end of 2024 and STILL people (me, for example) are seeing this same issue. To me, at least it appears that MS is installing a Defender update and, in my own case, the system appears to crash and restart - I'm not sure if Defender is a cause or maybe the Defender error in Event viewer is a result of the crash, but the crash happened at the time that MS was trying to install what appears to be a Defender update. HTH.
Service names such as MpKsl15169faf and MpKsl48db6a65 for event 7045
Hi,
For event 7045 (A service was installed in the system), we have been getting random service names such as MpKsl15169faf and MpKsl48db6a65. Though, the process gets installed is C:\ProgramData\Microsoft\Windows Defender\Definition Updates{A76DCDD6-5A5C-4943-BE71-929C9036EAA3}\MpKslDrv.sys. which seems legit.
Is this something to be concerned about?
Regards,
Veena
2 additional answers
Sort by: Most helpful
-
Veena Sagar 71 Reputation points
2020-11-18T08:18:17.237+00:00 Hi Jenny,
Thank you for the information. But, these random names seem to be logged everyday.
For each day, name differs. Mpksl followed by a bunch of random names and alphabets.Sorry for the delay.
Regards,
Veena -
Jenny Feng 14,131 Reputation points
2020-11-16T01:54:39.817+00:00 @Veena Sagar
Hi,The event ID you have mentioned above generates when a service was installed in the system.
If there is no other effect, I think this problem can be ignored.Hope above information can help you.
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.