1.    04 Oct 2016 #1
    Join Date : Nov 2015
    Homeless
    Posts : 14
    Windows 10 Pro

    Unknown program found in services


    I have a service that I dont understand. I was wondering if anyone else has it in their services list. It's called PAExec.

    Click image for larger version. 

Name:	PAExec.PNG 
Views:	4 
Size:	61.6 KB 
ID:	104393

    When I search the internet for PAExec that it's a program by Power Admin. Well what the heck is it doing installed on my machine and why? Please someone tell me that this isn't a standard Windows 10 Pro Anniversary service. I never installed the service and need to know what I should do if it doesn't belong there.
      My ComputerSystem Spec
  2.    04 Oct 2016 #2
    Join Date : Jul 2015
    Posts : 3,655
    10 Pro

    Quote Originally Posted by craazziee8 View Post
    Please someone tell me that this isn't a standard Windows 10 Pro Anniversary service.
    I don't have it on any of my machines so no I guess it isn't.

    You could download autoruns and see what program it is starting (click on the services tab and look under image path). That might give you some clue. If you wanted you could then delete the .exe and delete the service (right click on it in autoruns and select "delete").

    From Google though I'd at least disable (probably delete) it as it seems to be designed to allow remote commands to run.

    PAExec from Power Admin LLC?
      My ComputerSystem Spec
  3.    04 Oct 2016 #3
    Join Date : Nov 2015
    Homeless
    Posts : 14
    Windows 10 Pro
    Thread Starter

    Hey thanks for the quick reply. So I did what you said. Wasnt even showing up in Autoruns but the program was in the C:Windows section of my computer. And when I looked at my services.msc panel it was there plain as day. So what I did was deleted the service via cmd.exe and then deleted the executable. I noticed on Autoruns that when I unhid Microsoft Entries that my Browser service is missing from it's regular placement %systemroot% \system32.

    I dont know how this happened or how to even start looking for this but I really do apprectiate someone helping me so thanks lx07.
      My ComputerSystem Spec
  4.    04 Oct 2016 #4
    Join Date : Nov 2015
    Homeless
    Posts : 14
    Windows 10 Pro
    Thread Starter

    I have noticed I have a lot of weird applications and .dll's in my C:\Users\"Username"\AppData\Local\Temp.
    I have to be honest with you this isnt the 1st time I have noticed some weird things going on with my computer and I guess I really could use some help or some direction in some help. I have windows defender on malwaremalbytes installed and windows firewall on but they must have admin rights or something for this to happen.
    Help.
      My ComputerSystem Spec
  5.    04 Oct 2016 #5
    Join Date : Jul 2015
    Posts : 3,655
    10 Pro

    You can delete everything that is in %localappdata%\temp that is for sure. If you haven't already run a full scan with Malwarebytes and defender.

    I don't know much about cleaning malware though. Hopefully someone else can chip in.
      My ComputerSystem Spec
  6.    04 Oct 2016 #6
    Join Date : Nov 2015
    Homeless
    Posts : 14
    Windows 10 Pro
    Thread Starter

    Okay so I have one file that I'm not able to delete. It's called ~DF02A41D51CF43FB4B.tmp and when I tried to delete it....it said that the file was open in Internet Download Manager, a download manager. Also was wondering if anyone or if you lx07 knows what
    PsProtectedSignerWinTcb-Light on the Protection tab of Process Explorer means. Here's a pic of it.

    Click image for larger version. 

Name:	Process Explorer.PNG 
Views:	6 
Size:	82.3 KB 
ID:	104419
      My ComputerSystem Spec
  7.    12 Dec 2016 #7
    Join Date : Nov 2015
    Homeless
    Posts : 14
    Windows 10 Pro
    Thread Starter

    Just in case anyone wants to know. the PA Exec spyware slash malware was being installed everytime i used the program DDU diplay driver uninstaller. I dont know if that's part of his program or if someone injected pa exec into it EVERY time I downloaded it but it was from that.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Solved Groove Shows Unknown Artist & Unknown Album
I've just installed Windows 10 and experimented with the Groove music player. It finds all the songs but they are tagged Unknown Artist and Unknown Album. The songs appear fine in iTunes with the correct details and album art. I reset Groove and...
Software and Apps
Program files (.exe) not found by Windows Search
Program files (.exe) which are not installed (and so don't have a shortcut) are not being found by Windows search. Shortcuts, help files, folders etc with the same name all show up. 43172 Indexing is complete and .exe is defined (as default)...
General Support
Unknown program in Task Manager-Startup Programs
I am using Windows 10 Home up-to-date. Just found this entry (Program) in my Task Manager-Startup Programs. It has no identification except 'Program' . On right click it doesn't show any properties or location just the enable or disable button. I...
Software and Apps
Unknown Partition - Unknown File System - Cannot edit or remove!
I was in the process of updating several sata controllers and chipset drivers. I also installed a new USB 3.0 hub and was in the process of moving around several devices between ports. I had a problem with my keyboard which uses USB 2.0 as a...
Drivers and Hardware
Unknown programs with name program at Startup
Hi, my question is about two programs in the startup with name program, and i don't know wich program belongs, and if can disable it, I attach a picture of it 33651
Software and Apps
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 04:11.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums