[help] remove services that running in services console

[roy1984]

help....

a virus write it self in my services console

how to remove the services?

thanks

[cluberti]

If you go to HKLM\SYSTEM\CurrentControlSet\Services in the registry, you should find a key with that service name. You can set the "Start" value to 4 (disabled) and reboot, and that should keep it from starting. Once you get it disabled, then you should have better luck getting rid of it from your system with antivirus tools.

[LLXX]

He's already disabled it.

Use the following command:

sc delete service

Then remove the "svchcst.exe" file from C:\WINDOWS\SYSTEM32 (note the spelling - it's not svchost but svchcst).

Edited November 27, 2006 by LLXX