Removing a service Regedit won't let be deleted?

[bizzybody]

I used to have a Brother 5440cn multifunction printer/scanner/fax. It's 'uninstall' is typical, leaving files and registry keys behind. I think the final bit is BrSplService, the print spooler service it installed. (What? Windows own print spooler not good enough?)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BROTHER_XP_SPL_SERVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BROTHER_XP_SPL_SERVICE000]
"Service"="Brother XP spl Service"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="BrSplService"

This is also in ControlSet001 and ControlSet002

How do I get rid of them?

[SmaugyGrrr]

If you really want to delete it from registry.

1. Back up all your stuff...

2. Start -> run ->

sc create rootcmd binpath= "cmd /K start" type= own type= interact

(note that spaces are important)

3. sc start rootcmd

3. The new command prompt window is running under the LocalService account. Run regedit.exe in the newly-created command prompt window and delete the service keys.

Each time you run the rootcmd service will yield a new command prompt running as LocalService. Danger, Will Robinson! Handy in some circumstances though. Note that apparently the command prompt only appears on the local console - it will not show up in a remote desktop session.

[IcemanND]

why not just change the permissions on the problem keys. By default the most added service keys only have the SYSTEM account with full access to the key. If you add the current user or administrators group to the permissions and give it full access you can then delete the key.

[gosh]

You shouldn't be messing with enum. If you need to delete the service it's under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services.

What you really should be checking is HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors . Usually 3rd party's added a port monitor, you should delete it from that key if it's still listed.

-gosh

[bizzybody]

You shouldn't be messing with enum. If you need to delete the service it's under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services.

What you really should be checking is HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors . Usually 3rd party's added a port monitor, you should delete it from that key if it's still listed.

-gosh

That's strange, I wonder why searching the Registry for Brother or the service name didn't find it there. It's deleted from there now. Will it be removed from the other places? Will companies ever produce an uninstall function that actually removes EVERYTHING the installer installed?