"NisSrv.exe" Process on Windows 8

Q

What is the "NisSrv.exe" process on Windows 8? Is the "NisSrv.exe" process a virus? Can I terminate the "NisSrv.exe" process?

✍: FYIcenter.com

A

"NisSrv.exe - Microsoft Network Realtime Inspection Service" process for "Microsoft Network Inspection" service helps guard against intrusion attempts targeting known and newly discovered vulnerabilities in network protocols.

On the Processes tab of "Task Manager", "NisSrv.exe" process may be listed as:

Image Name  PID   Memory  Description

NisSrv.exe  3444  8816 K  Microsoft Network Realtime Inspection Service

Additional information about "NisSrv.exe" process:

Command line:
   c:\Program Files\Microsoft Security Client\NisSrv.exe
   
Started by: services.exe

Files used:
C:\ProgramData\Microsoft\Microsoft Antimalware\Network Inspection System
C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\SystemCertificates\My
C:\Windows\System32
C:\Windows\System32\en-US\KernelBase.dll.mui
   
Registry keys: 
HKLM\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 0\...
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates
HKLM\SOFTWARE\Microsoft\Microsoft Antimalware
HKLM\SOFTWARE\Microsoft\SystemCertificates
HKLM\SOFTWARE\Policies\Microsoft
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\Session Manager
HKLM\SYSTEM\ControlSet001\services\crypt32

"NisSrv.exe" process is not a virus. You should not terminate "NisSrv.exe" process.

 

"dwm.exe" Process on Windows 8

"WmiPrvSE.exe" Process on Windows 8

System Service Processes on Windows 8

⇑⇑ Windows 8 Processes Tutorials

2016-12-30, 331👍, 0💬