Odd service called “Drenubt”

[Matt_Smi]

I was disabling some services today and noticed an odd one called “Drenubt”. It is set to manual and there is no info provided for it, a Google search turned up nothing as well. If I got to properties its path is C:\WINDOWS\System32\regwiz.exe which to the best of my knowledge is a legit windows system file, so I am not too worried about it. But it is still somewhat odd. Anyone have it on their system or know what it is? Also what is "regwiz"?

[Bubba]

{QUOTE-> to the best of my knowledge is a legit windows system file, so I am not too worried about it. <-QUOTE}One of the only reasons to be worried is if that files properties did not say Microsoft ;)

Many worms in the past have been known to overwrite the original Windows REGWIZ.EXE file.

[Matt_Smi]

{QUOTE-> One of the only reasons to be worried is if that files properties did not say Microsoft ;) <-QUOTE}


Yeah, it does say Microsoft under file properties, but not Microsoft Corporation, which is what almost all of them seem to say. It says it was last modified September 3rd 2002 and I uploaded it to Jotti’s which found nothing, so I am pretty sure it is fine. But it is still a bit suspect in my book.