Use from Microsoft Sysinternals. If vlrk3spa.dll is loaded by an unrelated process like svchost.exe or explorer.exe (rather than avp.exe or kav.exe ), it is likely malicious.