"TPONSCR.exe" Process on Windows 7

Q

What is the "TPONSCR.exe" process on windows 7? Is the "TPONSCR.exe" process a virus? Can I terminate the "TPONSCR.exe" process?

✍: FYIcenter.com

A

"TPONSCR.exe" process represents "On screen display drawer" program.

"TPONSCR.exe" process is normally running under the parent process "tphkload" as shown in the process tree below:

Boot
   wininit
      services
         tphkload
            TPONSCR

On the Processes tab of "Task Manager", "TPONSCR.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
TPONSCR.exe               5,820 K   On screen display drawer

Additional information about "TPONSCR.exe" process:

Command line:
   C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE /UEFI\\.\pipe\{C6A9690C-33AE-4a55-8B65-9498CC0A7B34}.OnScreenDisplay

Programe file information:
   Name: TPONSCR.exe
   Location: C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
   Description: On screen display drawer
   Version: 8.70
   Size: 689832 bytes
   Last modified: 11/13/2015 4:22:50 PM
   Company Name: Lenovo Group Limited
   
Some data files used:
C:\Windows
C:\PROGRA~1\Lenovo\HOTKEY
C:\Windows\Fonts\StaticCache.dat

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKLM\SYSTEM\ControlSet001\Control\Nls\CustomLocale
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\FolderDescriptions\{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\PropertyBag
HKLM\SYSTEM\ControlSet001\services\LENOVO.MICMUTE\Parameters
HKLM\SYSTEM\ControlSet001\services\LENOVO.CAMMUTE\Parameters
HKCU\Software\Lenovo\OSD\ExtApp\APS
HKLM\SYSTEM\ControlSet001\Control\Nls\Locale

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\SYSTEM32\wow64.dll
C:\windows\SYSTEM32\wow64win.dll
C:\windows\SYSTEM32\wow64cpu.dll
C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
C:\windows\SysWOW64\ntdll.dll
C:\windows\syswow64\kernel32.dll
C:\windows\syswow64\KERNELBASE.dll
C:\windows\syswow64\ADVAPI32.dll
C:\windows\syswow64\msvcrt.dll

"TPONSCR.exe" process is not a virus. You should not terminate "TPONSCR.exe" process.

 

System Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials

2016-12-21, 496👍, 0💬