How to remove the regsvc32 virus

Most antivirus programs identify regsvc32.exe as malware—for instance Kaspersky identifies it as Trojan-Spy.Win32.Spenir.h, and Symantec identifies it as Spyware.SniperSpy.

The regsvc32.exe file is a software component of Gaobot Worm.
Regsvc32.exe is an executable file that is created by the Agobot worm (also known as GAOBOT), a malicious computer program designed for the Windows platform. The worm can remotely execute programs and run commands, use a keylogger to track keyboard entries, send data across networks and spread copies of itself. The worm can also be used to trigger Denial-of-Service (DoS) or Distributed Denial-of-Service (DDoS) attacks on a targeted system, such as an Internet server to render it useless. The Agobot worm was first created by Axel "Ago" Gembe, a German programmer. Agobot is a program written in C++. It is a type of Botnet (a collection of programs communicating with each other over networks to perform complex tasks) that does not require much knowledge of programming to modify or use. A module created for a particular program in the Agobot family can be fitten with ease into another bot. This lead to many variants of the worm being designed to suit the attacker's needs. Simply deleting the file may not solve the problem. Scanning and removing it with a trusted anti-virus software is recommended.

RegSvc32 stands for Registry Service (32-bit)

The free file information forum can help you find out how to remove it. If you have additional information about this file, please leave a comment or a suggestion for other users.

Click to Run a Free Virus Scan for the regsvc32.exe malware

Regsvc32.exe file information

The process known as OPlnwTB or Registry Service belongs to software regsvc32 or Nitto Access by RXS or armor co (

Description: Regsvc32.exe is not essential for Windows and will often cause problems. The file regsvc32.exe is located in a subfolder of C:\Windows. The file size on Windows 10/8/7/XP is 163,840 bytes. 
The program has a visible window. There is no file information. The software starts upon Windows startup (see Registry key: MACHINE\Run, Run, MACHINE\RunServices). It is not a Windows system file. Regsvc32.exe is able to record keyboard and mouse inputs, hide itself and monitor applications. Therefore the technical security rating is 36% dangerous.

Recommended: Identify regsvc32.exe related errors

External information from Paul Collins:
There are different files with the same name:

Important: You should check the regsvc32.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

There are no user opinions yet. Why not be the first to write a short comment?

Do you have additional information? Help other users!
What do you know about regsvc32.exe:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving regsvc32 issues

The following programs have also been shown useful for a deeper analysis: Security Task Manager examines the active regsvc32 process on your computer and clearly tells you what it is doing. Malwarebytes' well-known anti-malware tool tells you if the regsvc32.exe on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.

A clean and tidy computer is the key requirement for avoiding PC trouble. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

Other processes

regsvc32.exe [all]