Share via

Something keeps enabling remote registry

Anonymous
2019-12-25T00:13:14+00:00

I recently switch to  Kaspersky Internet Security, which will tell me every single day that remote registry is enabled, and prompt me to disable it, which I do.

I have manually checked and confirmed that the service is definitely disabled, not just stopped.

But within 24 hours, it will somehow get re-enabled and Kaspersky will give me the alert again. And yes, I do confirm that the service really is re-enabled and running.

How can I find out what is constantly enabling the remote-registry service?

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

16 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2019-12-26T21:52:38+00:00

    This is 100% incorrect and terrible advice for anyone.

    I suggest you do some research and you will find that Windows Defender is very basic compared to other security products and only provides very limited protection against threats and malware and Malwarebytes  as well is also very basic and does not have a very impressive detection rate or score from testers.

    Was this answer helpful?

    5 people found this answer helpful.
    0 comments
  2. Anonymous
    2019-12-26T21:54:23+00:00

    I think you are not understanding the issue.

    I am not complaining about Kaspersky not is it wrongly reporting the issue.

    As I stated above, I have checked and confirmed that RemoteRegistry is indeed being re-enabled, so Kaspersky is telling the truth.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  3. Anonymous
    2019-12-25T02:15:43+00:00

    Hi,

    I'm an independent advisor and hope this will help in your issue.

    In order to find out what have caused Remote Registry service to be enabled, you will need to scroll through Event Viewer - System Logs.

    https://support.microsoft.com/help/302542

    I would suggest using the Find function (Ctrl + F), and look for RemoteRegistry. You will then find the user and computer who have changed the service startup type.

    Let me know if I can help you further!

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  4. Anonymous
    2019-12-25T01:05:54+00:00

    Are you the administrator for a deployment of Kaspersky hosts on a network? That's what the remote registry feature of Kaspersky Security Center is for.

    I'm not an administrator, so I have (and really like) the consumer version of Kaspersky software: Kaspersky Internet Security. Being the consumer version, I'm not prompted for the remote registry feature.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  5. Anonymous
    2019-12-25T00:48:44+00:00

    There is no need to have any 3rd party anti virus or security programs

    Windows Defender and Malwarebytes are all you need and both can be had free.

    Was this answer helpful?

    0 comments