Check or Attack Name: rshsvc

The Rsh service was detected as running. A version of rsh ships with the Windows NT Resource Kit, which executes all commands, regardless of user, under the system account. The system account is the most powerful account on a Windows NT computer, and we recommend not running this service under any circumstances. If this service is detected, use the instsrv tool, which also ships with the Windows NT Resource Kit, to remove the rsh service.

Remove the rshsvc service.

To remove the service, follow these steps: