Wscsvc.reg File -

Some Windows updates re-register services. Keep a copy of your working wscsvc.reg file on the desktop for quick reapplication.

Is wscsvc.reg a virus? No, the genuine file is harmless administrative data. However, malware authors have been known to name malicious scripts wscsvc.reg to trick users.

How to verify authenticity:

A wscsvc.reg file may include entries under:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center or HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider

A file named wscsvc.reg typically contains a script that targets the specific registry path for the Security Center service: wscsvc.reg file

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center

Or, in more modern versions of Windows:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc

Here is an example of what the content of a typical wscsvc.reg file might look like if it is designed to disable specific warnings: Some Windows updates re-register services

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001

In this specific example, the dword:00000001 sets the value to "True" (enabled), which tells the Security Center to disable the notifications for the Firewall, Updates, and Antivirus.