Service hide in console services(services.msc)

[WinXP]

The WinMGMT Service (Bequeather of instrumentation of manages. of the Windows) he is occult in the console of services (services.msc)

[cluberti]

In XP and Server 2003, it's been moved to the Network Services svchost.exe process. It can be broken out again into it's own process, but more surgery would be needed to make it more Windows 2000-like:

1. Stop the winmgmt service

2. Open regedit and browse to HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost

3. Edit the "netsvcs" value, and remove the winmgmt entry

4. Create a new registry REG_MULTI_SZ string value type named "wmigroup"

5. Add winmgmt to the new "wmigroup" value

6. Browse to HKLM\SYSTEM\CurrentControlSet\Services\winmgmt\ImagePath

7. Edit the "ImagePath" value

...change this:

%SystemRoot%\System32\svchost.exe -k netsvcs

...to this:

%SystemRoot%\System32\svchost.exe -k wmigroup

8. Reboot for the changes to take effect

To see the changes, open a command prompt and run tasklist /svc and you should now see a svchost.exe entry running winmgmt.

[LLXX]

Bequeather of instrumentation of manages. of the Windows