Weird alpha numeric processes running in Task Manager

[ryguy7272]

Can someone please tell explain what these weird alpha numeric names are in my Task Manager?

Please see the attached image.

I don't think I should have these running in the background and I don't know where they are coming from. Is there some way to permanently get rid of these things?
Thanks!

 

[Layback Bear]

Do you have Excel running in the background?

Check msconfig. Type it into the Start Orb should get you there. Then check Startup. Unchecking Excel and rebooting should stop Excel from running in the background when not needed.

Jack

 

[ryguy7272]

Are you referring to User Name? Actually, 'Excel' is the name of my computer.

 

[Megahertz07]

Try to find out in witch folder are those *.exe files on.
Make a search on windows folder fist.

Just in case, download and run superantispyware. SUPERAntiSpyware - SUPERAntiSpyware Portable Scanner

 

[LMiller7]

What is the full path to these files? Likely all in the same folder.

 

[Layback Bear]

I was referring to the Program Excel.

Buy Excel 2016 spreadsheet software - Microsoft Store

Excel is also part of Microsoft Office.

If your computer is named Excel then I have no idea what those things are.

Jack

 

[ryguy7272]

Ok, I never really figure out what that stuff was, but I found the folder where they were all located and I deleted all of those things. Thanks everyone!

 

[Callender]

You might be interested in TaskManager addon - Prio. I've been using it for a few years as a way of quickly checking if unsigned processes are running. They are highlighted in red. Unsigned doesn't automatically mean bad but unsigned running processes need some research. If legit they can be assigned "Treat as valid" and thus will appear in green.

​

If you right click a process you get the file path.

With prio you get the same info presented in a balloon by hovering the mouse over the process name.

Download if interested: Prio - Process Priority Saver. | O&K Print Watch

Settings are stored in %USERPROFILE%\Appdata\Roaming\ in the prio.ini file and can be viewed with a text editor.

Note: Personally I don't use it to change the priority of a process or enable silent elevation because I use other methods for those.

You might also be interested in the tutorial here:

Process Explorer + VirusTotal (to check all processes with 50+ AV's)
Check all running processes on VirusTotal

I find it a little slow and personally use an alternative.