Both the services are virus attempts that i managed to disable.

Locked

All these are my internal users.... I mean authorized users. I am not sure my i am receiving this invalid users, they are defined in AD and as well as DNS