I've recently discovered eight services installed on my machine, all mimicking the name of legitimate Windows services with a string of randomly generated characters appended to the end of the name. The set of characters changes upon boot.
Normally most services seem to be launched under the username SYSTEM or NETWORK SERVICE or LOCAL SERVICE, etc.
These eight mysterious services are launched instead by 'prugoclepr'. i.e. 'me', on startup.
Connected Devices Platform User Service <--- Legit OS service
Connected Devices Platform User Service_1196b9 <--- Weird thing that launches under my username.
DevicesFlow <--- Legit OS service
DevicesFlow_1196b9 <--- Weird thing that launches under my username.
MessagingService <--- etc
MessagingService_1196b9 <--- etc
Sync Host
Sync Host_1196b9
Contact Data
Contact Data_1196b9
User Data Storage
User Data Storage_1196b9
User Data Access
User Data Access_1196b9
Windows Push Notifications User Service
Windows Push Notifications User Service_1196b9
Usually, only two or three will launch on startup. It used to be that if I stopped one, another would start up, until I did a couple things over here: https://www.bleepingcomputer.com/forums/t/661641/infected-with-something-anti-malware-tools-cant-find-it/#entry4369823
Now if I stop them, they stop.
What are these, why are they duplicating the names of services already on my machine, why do they have appended characters randomizing on boot, and why are they starting under my username?