Share via

Super Suspicious Files

Anonymous
2018-12-22T00:14:17+00:00

Hello,

I was taking a look through my task manager and found a process called "sedsvc" I went to the location, and I brought me to C:\Program Files\rempl, I found a bunch of other things in that folder like disktoast.exe, sedlauncher.exe, sedsvc.exe, osrrb.exe, etc. I'm super suspicious about these files and I'm not sure if they're safe or not, if they're not, what do I do? Please respond ASAP, Thanks!

Windows for home | Windows 10 | Files, folders, and storage

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

4 answers

Sort by: Most helpful
  1. Anonymous
    2018-12-22T00:25:15+00:00

    Hi,

    It's part of rempl v2 (forced update hijackers) installed by KB4023057 and KB4295110 to force update any version of Windows 10 to 1803.

    KB4023057 and KB4295110

    create "Service name: sedsvc" "Display name: Windows Remediation Service" which runs "%ProgramFiles%\rempl\sedsvc.exe"

    creates "\Microsoft\Windows\rempl\shell" task and runs "%ProgramFiles%\rempl\sedlauncher.exe" (which has replaced "%ProgramFiles%\rempl\rempl.exe") every 23 hours.

    So, delete the %ProgramFiles%\rempl folder or use a script to disable it. One such script is the WUMT Wrapper Script. The latest version is always on Major Geeks.

    Was this answer helpful?

    80+ people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2018-12-22T00:26:02+00:00

    Hi, L.

    sedsvc.exe is part of Microsoft:registered: Windows:registered: Operating System and developed by Microsoft Corporation

    SUMMARY: Sedsvc.exe, Sedlauncher.exe, Rempl.exe, Remsh.exe and WaaSMedic.exe files present in REMPL folder in your Windows 10 computer are not a virus or malware. These files are copied by a reliability update KB4023057 for Windows 10 to improve Windows Update Service components in your machine. The KB4023057 update may also install a program called "Windows Setup Remediations (x64) KB4023057" in your Windows 10 device which can be found under "Settings -> Apps -> Apps & features" page.

    https://www.askvg.com/what-are-sedsvc-exe-sedla...

    Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

    Was this answer helpful?

    40+ people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2018-12-22T00:25:44+00:00

    P.s: Please, if the answer resolve your issue, click on Yes. Thanks.

    Was this answer helpful?

    20+ people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2018-12-22T00:26:26+00:00

    Was this answer helpful?

    10 people found this answer helpful.
    0 comments No comments