Found an Odd looking service in service snap-in

[ltmcmullen]

Hello Forum,

I happen to be looking through the services running on my PC. I came across and oddly named service (PVLKPTXKAOO) and it is located in:

C:\Users\Lewis\AppData\Local\Temp\PVLKPTXKAOO.exe

It is set to manual and is not running at the moment. I notice that it is in a temp folder, so I am thinking of just cleaning the folder out. I am not sure where it comes from or if it has other programs associated with it.

I have posted a snapshot here: https://skydrive.live.com/redir?resid=6171FE15DB435155!181

Any ideas or suggestions?

 

[bbinnard]

It is probably some sort of virus or malware. Your best bet is to delete it (if you can.) After that, reboot and see if it comes back with another name. Things like that often re-generate themselves.

 

[MilesAhead]

What's the modification date? The only exe files I have in that temp folder are related to AutoHotkey. Only thing might be legit is if you have an AHK program that runs as a service. If it was a virus you'd think there's be more hits. Only hit I see is yours. Unless the name is created randomly. In fact with a name like that it looks like a program is using a TmpName() function.

I would use AutoRuns to try and find where it's starting and remove it until you know what it's for.