Share via

Service names such as MpKsl15169faf and MpKsl48db6a65 for event 7045

Veena Sagar 71 Reputation points
2020-11-13T07:34:24.567+00:00

Hi,

For event 7045 (A service was installed in the system), we have been getting random service names such as MpKsl15169faf and MpKsl48db6a65. Though, the process gets installed is C:\ProgramData\Microsoft\Windows Defender\Definition Updates{A76DCDD6-5A5C-4943-BE71-929C9036EAA3}\MpKslDrv.sys. which seems legit.

Is this something to be concerned about?

Regards,
Veena

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,917 questions
Accepted answer
  1. Jeff Mason 6 Reputation points
    2024-10-19T14:10:26.6833333+00:00

    @Veena Sagar , sorry for the vagueness of @Jenny Feng answers. Clearly, we all can see this is related to Defender, so you'd think there would be more useful answers than "start in safe mode" without Microsoft services. That is a NON-Answer, since clearly, this is a MICROSOFT issue and product (Defender). This appears to be MS Defender possibly installing a new definition file and possibly failing at installing the file. And now it is near the end of 2024 and STILL people (me, for example) are seeing this same issue. To me, at least it appears that MS is installing a Defender update and, in my own case, the system appears to crash and restart - I'm not sure if Defender is a cause or maybe the Defender error in Event viewer is a result of the crash, but the crash happened at the time that MS was trying to install what appears to be a Defender update. HTH.

    0 comments

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Veena Sagar 71 Reputation points
    2020-11-18T08:18:17.237+00:00

    Hi Jenny,

    Thank you for the information. But, these random names seem to be logged everyday.
    For each day, name differs. Mpksl followed by a bunch of random names and alphabets.

    Sorry for the delay.

    Regards,
    Veena

    1 person found this answer helpful.
  2. Jenny Feng 14,131 Reputation points
    2020-11-16T01:54:39.817+00:00

    @Veena Sagar
    Hi,

    The event ID you have mentioned above generates when a service was installed in the system.
    If there is no other effect, I think this problem can be ignored.

    Hope above information can help you.

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.