| Microsoft Windows services is long-running executable applications that run in their own Windows sessions. A service can be automatically started when the computer starts up. It can be stopped and restarted without user interaction. A service can run in the security context of a specific user account, and can gain higher priority and privilege over default computer account. These features are often exploited by malware to make them difficult to detect and remove.
Click here to run a Free Registry Scan
So how to delete a service installed by malware/spyware? Follow these steps to locate and remove the service files and registry entries.
- Find the location of the file. To do so,
- right click the Task bar, on the pop menu click Start Task Manager to open Windows Task Manager.
- Click the Services tab to view all the services.
- Locate the service you want to delete. Right click on the service name and click Go To Process, the Process tab is activated and the executable file associated with this service is automatically selected and highlighted.
- Right click the highlighted file and click Open File Location.
- You can then locate the file. Rename the file to whatever you like and take a note on the new name.
- Open the DOS command (Click Start, type cmd, in the search result right click the cmd and selected Run as Administrator), type the following command to remove the service from system registry:
sc delete servicetodelete
Please note you have to replace the servicetodelete with the name of the service that you want to delete.
- Reboot the computer.
- Delete the file you have found and renamed in step 1.
- The service is removed from your system registry and the related file is also deleted.
- Done.
|
|