%SysDir%\msrsvp.exe is Trojan/Backdoor. Msrsvp.exe modifies the value: "ImagePath" = "%SYSTEM%\msrsvp.exe" in the registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RSVP Restore the ImagePath value: %SystemRoot%\System32\rsvp.exe Kill the process %SysDir%\msrsvp.exe and delete %SysDir%\msrsvp.exe.