Most antivirus programs identify regsvc32.exe as malware—for instance Kaspersky identifies it as Trojan-Spy.Win32.Spenir.h, and Symantec identifies it as Spyware.SniperSpy.
The regsvc32.exe file is a software component of Gaobot Worm.
Regsvc32.exe is an executable file that is created by the Agobot worm (also known as GAOBOT), a malicious computer program designed for the Windows platform. The worm can remotely execute programs and run commands, use a keylogger to track keyboard entries, send data across networks and spread copies of itself. The worm can also be used to trigger Denial-of-Service (DoS) or Distributed Denial-of-Service (DDoS) attacks on a targeted system, such as an Internet server to render it useless. The Agobot worm was first created by Axel "Ago" Gembe, a German programmer. Agobot is a program written in C++. It is a type of Botnet (a collection of programs communicating with each other over networks to perform complex tasks) that does not require much knowledge of programming to modify or use. A module created for a particular program in the Agobot family can be fitten with ease into another bot. This lead to many variants of the worm being designed to suit the attacker's needs. Simply deleting the file may not solve the problem. Scanning and removing it with a trusted anti-virus software is recommended.
RegSvc32 stands for Registry Service (32-bit)
The free file information forum can help you find out how to remove it. If you have additional information about this file, please leave a comment or a suggestion for other users.
Description: Regsvc32.exe is not essential for Windows and will often cause problems. The file regsvc32.exe is located in a subfolder of C:\Windows.
The file size on Windows 10/8/7/XP is 163,840 bytes.
The program has a visible window. There is no file information. The software starts upon Windows startup (see Registry key: MACHINE\Run, Run, MACHINE\RunServices). It is not a Windows system file. Regsvc32.exe is able to record keyboard and mouse inputs, hide itself and monitor applications. Therefore the technical security rating is 36% dangerous.
Recommended: Identify regsvc32.exe related errors
If regsvc32.exe is located in a subfolder of "C:\Program Files", the security rating is 60% dangerous. The file size is 176,128 bytes. The program is not visible. The program starts when Windows starts (see Registry key: MACHINE\Run, Run, MACHINE\RunServices). It is not a Windows core file.
If regsvc32.exe is located in a subfolder of C:\Windows\System32, the security rating is 36% dangerous. The file size is 1,283,661 bytes. The program has a visible window. There is no information about the author of the file. The program is loaded during the Windows boot process (see Registry key: MACHINE\Run, Run, MACHINE\RunServices). Regsvc32.exe is not a Windows core file. Regsvc32.exe is able to manipulate other programs. regsvc32.exe appears to be a compressed file.
If regsvc32.exe is located in a subfolder of the user's profile folder, the security rating is 64% dangerous. The file size is 208,896 bytes.
External information from Paul Collins:
There are different files with the same name:
Important: You should check the regsvc32.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.
The following programs have also been shown useful for a deeper analysis: Security Task Manager examines the active regsvc32 process on your computer and clearly tells you what it is doing. Malwarebytes' well-known anti-malware tool tells you if the regsvc32.exe on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.
A clean and tidy computer is the key requirement for avoiding PC trouble. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.
Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.