Windows 10: 'wlrmdr.exe' Registry Key in BAM Folder? Why?

within the HKLM > System > CurrentControlSet > Services > bam > State > UserSettings > user SID regedit pathway, I've found that there's a key in there that simply won't disappear on its ownthe key is Device\HarddiskVolume\Windows\System32\wlrmdr.exeI know what BAM is and I know what wlrmdr Windows Logon Reminder is as well, but I'm completely lost as to why it is present in this folder as a registry keyI never receive any Windows Logon Reminder notifications, and I know that as an objective fact. the first time I saw it was after performing a System Restore and using

:)

 

Found 'sc.exe' in BAM User Settings in Registry- Confused as to Why It Has Appearer

it definitely does appear to be invoked by the Ryzen Master uninstaller. I downloaded Ryzen Master on my laptop to test

after uninstalling with Control Panel, I found the SysWOW64 pathway for 'sc.exe' in the BAM folder. which was not there before

it didn't have the System32 pathway of 'sc.exe' though but it did have the SysWOW64 version. my PC has both the System32 and SysWOW64 pathways for sc.exe listed as registry entries

so seems like a case of the Ryzen Master uninstaller invoking it

 

Found 'sc.exe' in BAM User Settings in Registry- Confused as to Why It Has Appearer

to preface, I know what BAM is and I know roughly was sc.exe is (related to/uses the Service Control Manager to do things with Windows Services)

I like to frequently check this pathway;HKLM > System > ControlSet001 > Services > bam > State > UserSettings > (my user SID)

I noticed that in the bam UserSettings, under my user SID, there's an entry for 'Device\HarddiskVolume whatever\Windows\System32\sc.exe'

I don't believe this was here yesterday and I'm confused as to why it's appeared today; as I said, to my understanding sc.exe is related to Remote Procedure Call and Windows Services, with the SCM

I'm a little on edge right now and I don't know if I like the sound of this file having been used. I am well aware that sc.exe is a legitimate Microsoft file (it's in System32 as well), but that isn't my concern. my concern is more about why this was apparently used/called

on startup, I do regularly kill Services such as imgsvc and TabletInputService if they load, just because I don't use them; however, I've done this on my laptop and sc.exe does not appear in bam > UserSettings. my friend's PC also has no trace of sc.exe in Regedit either

can anyone tell me if any of these activities may have caused an 'sc.exe' entry in BAM to appear? I was doing some things on my PC today that I haven't done in a while, or at all;

'today, I have used RevoUninstaller to remove a program, it's folders, and Registry Keys 4 times. I have reinstalled Ryzen Master once.

I have used a System Restore point to restore Windows to 4 hours earlier. I have reset my Bios once. I have enabled/disabled SecureBoot a few times and "Installed the Default Secure Boot Keys" once, when I reset the Bios'

could any of these actions been a reason for sc.exe to spawn as a BAM entry in the Registry? and do the keys/entries in bam > State > UserSettings > [User SID] clear themselves after 7 days if they are not accessed or used again?

 

What is the BAM supposed to mean in...

It's a warning that if you play with the Windows registry your computer will go BAM!!