Results 1 to 4 of 4
  1. #1
    2 Star Lounger
    Join Date
    Aug 2014
    Posts
    123
    Thanks
    19
    Thanked 0 Times in 0 Posts

    How to remove service

    Got a Yahoo! & Sigpot malware. Was able to remove everything but in the process the Yahoo! Updater service was disabled. The image, I believe, was removed but it still shows up in the services.
    Can't find a way to remove it. Any suggestions?

  2. #2
    jwoods
    Guest
    There is a tool on Sourceforge called "Process Hacker" (similar to Sysinternals Process Explorer), that among other features, will list all services and has a delete option.

    http://processhacker.sourceforge.net/

  3. #3
    WS Lounge VIP Calimanco's Avatar
    Join Date
    Dec 2009
    Location
    UK
    Posts
    718
    Thanks
    1
    Thanked 144 Times in 130 Posts
    Do you mean YahooAUService.exe? Open the Registry Editor. Under the Edit tab, use find and find next to locate and delete this and any other left over Yahoo keys. Back up the Registry before you start in case of any mishaps.

  4. The Following User Says Thank You to Calimanco For This Useful Post:

    spark55 (2015-04-03)

  5. #4
    2 Star Lounger
    Join Date
    Aug 2014
    Posts
    123
    Thanks
    19
    Thanked 0 Times in 0 Posts
    Thanks to all. I found this in the interim"
    Need to be in an admin command prompt to execute
    the following commands:
    SC STOP shortservicename
    SC DELETE shortservicename
    If getting errors when running the above for not
    having necessary access rights to stop/delete the
    service, run the command prompt as administrator.
    First get a service's short service name, by using
    the following command to get a status list of
    services:
    SC QUERY state= all
    For a more concise list, execute this command:
    SC QUERY state= all | FIND "_NAME"
    The short service name will be listed just above
    the display name, like this, for example,
    (it is not recommended to delete the SomeSRV
    service):
    SERVICE_NAME: SomeSRV
    DISPLAY_NAME: Some Real Service
    And to delete that service:
    SC STOP SomeSRV
    SC DELETE SomeSRV
    NOTE: If a service is DISABLED it is only necessary
    to execute:
    SC DELETE SomeSRV

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •