What is the "tpnumlk.exe" process on windows 7? Is the "tpnumlk.exe" process a virus? Can I terminate the "tpnumlk.exe" process?

"tpnumlkd.exe" process represents "NumLock on screen display for ThinkPad" program. "tpnumlk.exe" is a child process created by the "TPHKSVC.exe" process to display the "NmLk (Number Lock)" function key status on the screen.

"tpnumlkd.exe" process is normally running under the parent process "TPHKSVC" as shown in the process tree below:

Boot
   wininit
      services
         TPHKSVC
            tpnumlkd

On the Processes tab of "Task Manager", "tpnumlkd.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
tpnumlkd.exe              7,392 K   NumLock on screen display for ThinkPad

Additional information about "tpnumlkd.exe" process:

Command line:
   C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe

Programe file information:
   Name: tpnumlkd.exe
   Location: C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe
   Description: NumLock on screen display for ThinkPad
   Version: 1.74
   Size: 208040 bytes
   Last modified: 11/16/2015 10:12:42 PM
   Company Name: Lenovo Group Limited
   
Some data files used:
C:\Windows\System32
C:\Windows\System32\en-US\crypt32.dll.mui
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\My

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SYSTEM\ControlSet001\services\crypt32
HKLM\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\CertDllCreateCertificateChainEngine\Config
HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT
HKU\.DEFAULT\Software\Microsoft\SystemCertificates\My
HKU\.DEFAULT\Software\Microsoft\SystemCertificates\CA
HKLM\SOFTWARE\Microsoft\SystemCertificates\CA
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\CA

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\system32\kernel32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\windows\system32\USER32.dll
C:\windows\system32\GDI32.dll
C:\windows\system32\LPK.dll

"tpnumlk.exe" process is not a virus. You can terminate "tpnumlk.exe" process. You don't need to see "NmLk (Number Lock)" function key status on the screen.

 

⇒Application Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials