Windows 10 service called AarSvc_70f961. What is it and how could I disable it

serviceswindows 10windows-services

Recently I noticed a service in my windows 10 (v.1903, non-insider) installation with these properties:

  • Service name: AarSvc_70f96
  • Display name: Agent Activation Runtime_70f961
  • Description: Runtime for activating conversational agent applications
  • Path to executable: C:\WINDOWS\system32\svchost.exe -k AarSvcGroup -p

It is set to manual and cannot be disabled.
Information on this service is very scarce but there are a few mentions like this where the last part of the service seems to be a random hexadecimal number (AarSvc_xxxxxx).

According to this, it is new to version 1903.

Does anyone have any more information as to what it is, if it should be disabled and how it could be disabled?

Best Answer

It's possible to set this service to disabled. Open Regedit, and navigate to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AarSvc_70f96

Note that the trailing five digits will be different on every system. They can be determined by checking the "Service Name" entry shown when you double click on the service entry in the Services MMC plugin.

Inside that key is an entry "Start" which is a 32 bit DWORD value. Set that value to 4, the service will be disabled, and will not start at boot time.

You will also see another service AarSvc immediately above the one with the five digit random number. According to this page: https://docs.microsoft.com/en-us/windows/application-management/per-user-services-in-windows services of this sort are Per User services, and to completely disable them, the version without the five digits, AKA the template service, should also have its "Start" value set to 4.