Re: completely delete unknown services from registry

Steven L Umbach wrote:
Logon as a local administrator and user regedit to open the registry editor and go to Hkey_Local_Machine\system\currentcontrolset\services and look for the registry entries and delete them. Check the general page of the service in services.msc to find the service name which may be different than the display name as that is what you want to look for and be sure to check the path name to the executable to make sure that file is also deleted. If you find a key with the service name right click it and select delete. Many malware or spyware detection and removal programs may also clean it up. Be sure to use the latest definitions for anything you scan in and also try do it in Safe Mode. --- Steve

http://www.microsoft.com/athome/security/protect/windowsxpsp2/Default.mspx --- Protect Your PC tips from Microsoft.

"Len Fluhrer IIIrd" <len3@xxxxxxxxxx> wrote in message news:9omdnU1hALcZUhnZnZ2dnUVZ_tGdnZ2d@xxxxxxxxxxxxx

Can anyone help with the following.

I have cleaned out temp directory but services.msc shows two services loaded from temp directory unknown if they were spyware or what.

The following service names

PYHQWDH
PFTKEQ

Both currently are set to disable.

Is there anyway to complete remove these services from the registry.

Thanks



Thanks Steven I will give that a try. The services are not part of spyware they are left over bits of Zone Alarm Pro taken out when I switched to ZA Suite.

Thanks
.

Relevant Pages

  • Re: svchost.exe
    ... Spyware and dialers create registry entries that svchost loads as windows ... and HijackThis you should download and install. ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: HijackWare keeps writing different home page to registry
    ... that had located a .dll and removed it and the registry entries never were ... I am convinced this is some type of spyware and I have run every ... > HijackThis report the problem as a registry string for the page above: ...
    (microsoft.public.windowsxp.general)
  • Re: Virus Damage
    ... Try these programs to check for any spyware that may be on your system: ... although Norton deleted it on arrival I am unable to restore my Internet ... address in the registry entries for Internet Explorer start page, ... to where the downloaded virus files can be and how to permenantly change my ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: CWS.SEARCHX CoolWebSearch wont go away!
    ... The latest CWShredder didn't work now with CWS.searchx (at least thats ... i found following registry entries that re-insert the spyware at IE. ...
    (microsoft.public.windowsxp.general)
  • Re: CWS.SEARCHX CoolWebSearch wont go away!
    ... The latest CWShredder didn't work now with CWS.searchx (at least thats ... i found following registry entries that re-insert the spyware at IE. ...
    (microsoft.public.security)