regsvc.exe

[orlando]

Hi!

I recently realized that regsvc.exe is always running on my machine.
Now, i learned that it's a program that can be used to remotely edit the
registry- and thats strange, because this is a single workstation
connected to the internet via cable- So this service has no use, but i
can not stop it, it says its protected - when i terminate the process
from another taskmanager its back up in a sec...so i am a little
suspicous about this process, because it may be used to edit my registry?

Please give me advice, TIA!

regards, orlando

 

[Jerold Schulman]

Hi!

I recently realized that regsvc.exe is always running on my machine.
Now, i learned that it's a program that can be used to remotely edit the
registry- and thats strange, because this is a single workstation
connected to the internet via cable- So this service has no use, but i
can not stop it, it says its protected - when i terminate the process
from another taskmanager its back up in a sec...so i am a little
suspicous about this process, because it may be used to edit my registry?

Please give me advice, TIA!

regards, orlando

Disable the "Remote Registry" service.

Apply the following .reg file:

REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
"Start"=dword:00000002

Restart your computer.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com