What is the "TPHKSVC.exe" process on Windows 8? Is the "TPHKSVC.exe" process a virus? Can I terminate the "TPHKSVC.exe" process?

"TPHKSVC.exe - On screen display Fn+Fx handler" process for "On Screen Display" service is related to the Thinkpad On Screen Display Utility to display the function keys on the desktop screen.

On the Processes tab of "Task Manager", "TPHKSVC.exe" process may be listed as:

Image Name   PID   User Name   Memory  Description

TPHKSVC.exe  1896  SYSTEM      956 K   On screen display Fn+Fx handler

Additional information about "TPHKSVC.exe" process:

Command line:
   C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
   
Started by: services.exe

Files used:
C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\SystemCertificates\

Registry keys: 
HKLM\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\...
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates
HKLM\SOFTWARE\Microsoft\SystemCertificates
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\Session Manager
HKLM\SYSTEM\ControlSet001\services\IBMPMSVC\Parameters\Notification
HKLM\SYSTEM\ControlSet001\services\crypt32
HKU\.DEFAULT\Control Panel\International
HKU\.DEFAULT\Software\Microsoft\SystemCertificates
HKU\.DEFAULT\Software\Policies\Microsoft\SystemCertificates

"TPHKSVC.exe" process is not a virus. You can terminate "TPHKSVC.exe" process or stop the "On Screen Display" service. You don't need to display functions keys on the screen.

⇒ "tpnumlk.exe" Process on Windows 8

⇐ "tphkload.exe" Process on Windows 8

⇑ Application Service Processes on Windows 8

⇑⇑ Windows 8 Processes Tutorials