"CmRcService.exe" Process on Windows 7

Q

What is the "CmRcService.exe" process on windows 7? Is the "CmRcService.exe" process a virus? Can I terminate the "CmRcService.exe" process?

✍: FYIcenter.com

A

"CmRcService.exe" process represents "Configuration Manager Remote Control Service" program. "CmRcService.exe" is for "Configuration Manager Remote Control" service which provides the ability to remote control the system to authorized users

"CmRcService.exe" process is normally running under the parent process "services" as shown in the process tree below:

Boot
   wininit
      services
         CmRcService

On the Processes tab of "Task Manager", "CmRcService.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
CmRcService.exe           8,472 K   Configuration Manager Remote Control Service

Additional information about "CmRcService.exe" process:

Command line:
   C:\windows\CCM\RemCtrl\CmRcService.exe

Programe file information:
   Name: CmRcService.exe
   Location: C:\windows\CCM\RemCtrl\CmRcService.exe
   Description: Configuration Manager Remote Control Service
   Version: 5.00.8239.1000 (SCCM.150414-0330)
   Size: 671928 bytes
   Last modified: 4/14/2015 5:00:00 AM
   Company Name: Microsoft Corporation
   
Some data files used:
C:\Windows\System32
C:\Windows\winsxs\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.23545_none_14599ab28b920323
C:\Windows\System32\en-US\setupapi.dll.mui
C:\Windows\System32\en-US\newdev.dll.mui
C:\Windows\CCM\Logs\CmRcService.log
C:\Windows\System32\en-US\KernelBase.dll.mui

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKU\.DEFAULT\Control Panel\International
HKLM\SYSTEM\ControlSet001\services\WinSock2\Parameters\NameSpace_Catalog5
HKLM\SYSTEM\ControlSet001\services\WinSock2\Parameters\Protocol_Catalog9
HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\system32\kernel32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\windows\system32\USER32.dll
C:\windows\system32\GDI32.dll
C:\windows\system32\LPK.dll

"CmRcService.exe" process is not a virus. You can terminate "CmRcService.exe" process or stop "Configuration Manager Remote Control" service. But your network administrator may want to keep it running, so he/she can manage your computer remotely.

 

Application Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials

2016-07-17, 4857👍, 0💬