Can I Stop and Remove a Service Without Using Admin Tools

C

Carl

My WinXP SP2 machine has a service that was installed by a spyware
program that I cannot stop or remove with Administrative Tools |
Services. When I try, I get an error that the service information/entry
etc. cannot be found in the registry. The service is shows up in Adnin
Tools | Services as started with no other info.

Is there a way to stop and remove this service manually?

Thanks for any help.
 
R

Ramesh, MS-MVP

Carl,

Services are implemented in this registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

One of the sub-menu contains the 'malware' service that you're mentioning.
Spot it and delete. Follow-up with complete malware removal.

Run these malware cleaners:

1. Ad-Aware
http://www.lavasoftusa.com

2. SpyBot S&D
http://www.safer-networking.org

3. CWShredder
http://www.intermute.com/spysubtract/cwshredder_download.html

Update 1 & 2 before running a scan.

Clean-up Windows Startup:
http://windowsxp.mvps.org/startup.htm

Then, run a full system virus scan with fully updated definitions. Try Trend
Micro's Sysclean package (free), it's capable of eliminating keyloggers,
trojans etc.

Generic Trojan / Adware Infestation Removal Procedure:
http://www.claymania.com/removal-trojan-adware.html

Free Online Virus Scanners and Security Tests:
http://windowsxp.mvps.org/scanners.htm
 
C

Carl

Thanks for the advice. I used Ad-aware, Spybot, and MS Anti-spyware, all
left the service installed and started. Editing the registry was my last
resource but I didn't know where to look.

Thanks again.

Carl
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top