How To Remove Services In Windows

Services in the Windows operating system are background processes that usually require no user interaction. They are automatically started with Windows, or when a certain event occurs that triggers them. Most system administrators distinguish between first party and third party services. First party services have been installed with the operating system, they are from Microsoft and many are core parts of the OS. Disabling a core service could have serious consequences; Windows may stop booting, Internet may not work anymore or the printer refuses to print.

Third party services on the other hand are added by third party developers like Google, Apple or the company that developed the antivirus software that you have installed on the system.

These services sometimes cause problems, for instance if they are still listed under services even if the application has been long removed from the copy of Windows. Malicious software may add services as well sometimes and it may be necessary to delete them when your antivirus software is not able to.

But how can you remove services from Windows? The following guide highlights three different options; A command line tool, the Windows Registry and a third party software.

Removing Services from the command line

This is probably the most complex solution. You may need to open an elevated command prompt first, depending on the version of Windows. You can try and open the command line normally with the hotkey Windows-r, typing cmd and pressing enter. If you issue the command and get an error that you need administrative privileges you need to click on the Windows start orb, select Programs (or All Programs), then Accessories. Locate Command Prompt, right-click the item in the start menu and select Run as Administrator from the context menu. This triggers an UAC prompt under Vista and Windows 7 that needs to be accepted.

The command prompt displays Administrator: Command Prompt if the operation was successful.

Windows 7 and Vista users who have the search box enabled in the start menu can enter cmd instead in the box to open the elevated command prompt with Ctrl-Shift-Enter.

administrator command prompt

Windows Services are deleted with the command sc delete followed by the name of the service. Since it is likely that you do not know the name you need to open the Windows Services listing. This is done with the keys Windows-r, typing services.msc and enter on the keyboard.

windows services

What you need is the service name, not the display name that is shown in the main listing. The names may be identical sometimes. Double-click the service that you want to delete to see both names. Apple Mobile Device is for instance the service name and display name of the service. Microsoft on the other hand often uses short cryptic service names and longer display names. The Bitlocker Drive Encryption Service (display name) is listed with the service name BDESVC.

service name

The name may have implications on the command. Lets say we want to delete the Apple Mobile Device service, a leftover after uninstalling iTunes. The command to do that on the command line is sc delete "Apple Mobile Device".

Notice the quotation marks around the service's name? A space is generally seen as a new command or parameter, which means that it is necessary to use quotation marks if names or commands make use of spaces to basically tell the program that they are all part of a word or phrase. Take a look at the screenshot below to see what happens if the command is issued without quotation marks, and then with.

sc delete service

To paraphrase: To delete services from the command line you need to do the following:

  • Open an elevated command prompt
  • Open the Windows Services management listing
  • Identify the service name and not the display name by double-clicking on a service.
  • Run the command, make sure you use quotation marks if the name contains spaces.
  • The message [SC] DeleteService SUCCESS indicates that the service has been successfully removed from the operating system.

Deleting Services in the Windows Registry

All services are listed in the Windows Registry. If a service's Registry key is removed, it will be deleted from the system. This method is a lot faster usually. Here is how it is done:

Use the hotkey Windows-r to open a run box, enter regedit in the box and press enter. Some users may see an UAC prompt that they need to accept.

The window displays folders on the left side, and subfolders or parameters on the right. Locate the following Registry key by following the folder structure on the left.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services

A click on services lists all available Windows Services as subfolders of that key. Please note that the service's Service Name is used as the folder name which means that you may need to open the Services listing once again to identify the right services.

I suggest you backup the key first before you start deleting services. Left-click on the services folder and select File > Export to backup the key. Type in a file name and save it to the hard drive.

You can import the backed up key again by selecting File > Import and the file that you have previously exported.

windows services registry

Locate the service that you want to delete in the listing. A left-click selects the service and displays its parameters on the right pane. To remove a service press delete on the keyboard, or right-click the service and select delete from the context menu.

delete service

To paraphrase this method:

  • Open the Windows Registry
  • Navigate to the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services
  • Backup the services key
  • Identify the service that you want to delete
  • Left-click on that service and press delete on the keyboard

Using Third Party Software To Remove Windows Services

This method is probably the easiest from them all. All you need to do is to download the popular software Autoruns, which is freely available from Microsoft. The program is portable which means that it does not need to be installed after unpacking. Run autoruns.exe.

The program lists everything that gets started during Windows start. Locate the Services tab at the top and click it. All first and third party services are listed here by default.

You may want to filter out Microsoft services if you want to delete a third party service. Click on Options > Hide Microsoft and Windows Entries and press F5 afterwards to refresh the listing.

autoruns services listing

Locate the service that you want to delete and select it with a left-click. Press delete on the keyboard and confirm the deletion in the Windows that opens. Some Windows users may receive an access denied message. That's when the software is not run with elevated privileges. Just select Run as Administrator to restart Autoruns with administrative privileges and accept the UAC prompt if it is displayed.

autoruns

Perform the removal operation again, this time it should work. The entry is removed from the services listing immediately on success.

delete service

To summarize this method:

  • Download the free software Autoruns from Microsoft
  • Switch to the services tabs
  • Locate the service you want to delete
  • Left-click the service, press delete and confirm the deletion

Closing Words

This three methods should be enough to delete services in the Windows operating system. Autoruns is without doubt the most comfortable solution, the other two methods are on the other hand "built-in" which has its advantages as well.

It sometimes may be more efficient to stop and disable the Service instead of deleting it. This can be done best via the services.msc listing.

Please share this article

Facebooktwittergoogle_plusredditlinkedinmail


Filed under:


Responses to How To Remove Services In Windows

  1. hlm March 12, 2011 at 12:40 pm #

    Nice article Martin. Any recommendation on how to check if the services are legit or not before removing it. For example random named services created by malware or viruses.

    • Martin Brinkmann March 12, 2011 at 12:52 pm #

      Well you can look at the path of the executable for a start, this is done with a right-click on Properties in autoruns or a double-click in the services listing. I prefer to use autoruns because of its option to hide native Windows services. But you are usually left with a search on Bing, or whichever search engine you use, to find out more about a specific service. And if you are not sure if you need the service you can disable and stop it to see what happens.

  2. Grissino March 12, 2011 at 1:19 pm #

    It will be nice a button to print the article in a "print compatible" way... If there is already one, I missed it... :-(

    • Martin Brinkmann March 12, 2011 at 2:18 pm #

      I have added a print button per your request. You find it below each single article.

  3. MartinJB March 12, 2011 at 6:42 pm #

    Another great article. Came a day too late - Yesterday I removed a couple of erroneous services using Autoruns - made it so easy! :)

  4. Tech Crates March 12, 2011 at 7:03 pm #

    Very well written.... Found solution to many of the problems

  5. Q March 12, 2011 at 9:42 pm #

    My most used method to remove NT services is via the Windows Registry (sometimes automated with command line tools).

    There are some things that should be noted:

    Windows 2000 does not come with the sc.exe utility (however, it might have been available with the Windows 2000 resource kit)

    Not all services the are installed with the operating system are first party. For example, Windows XP (any service pack level) comes with a SafeDisc DRM driver that was controllable as a (hidden) service.

    Checking the list generated by services.msc often does not accurately enumerate all services; it only enumerates those that are not set to hidden. To enumerate from all services, the Windows Registry may be examined.

    • Martin Brinkmann March 13, 2011 at 10:32 am #

      Q thanks for the additional tips, you are right of course but I did not want to blow the article out of proportions.

  6. michael clyde March 19, 2011 at 1:57 am #

    ... short and informative. i like autoruns and the "highjackfree" that comes inside of the "a2" (a-squared) anti-malware app. as it shows hidden services as well as non-hidden.
    note: i manually delete everything from the installed "a2" folder except, the "highjackfree"
    executable, just because i don't like a-squared. (strange, huh)

  7. Sameer July 7, 2011 at 10:38 am #

    I need to hide the Windows Service from the Service list.
    Can anyone please share if they have any idea.

  8. Jack August 13, 2012 at 4:00 pm #

    Your registry hack does not fully cleanup the service on server 2008. You will still see the service with "unable to read configuration"
    I would recommend the "sc delete" command as you also mention. This worked fine.

  9. August November 13, 2013 at 1:57 pm #

    Autoruns then is the way to go. Thanks for sharing this with us.

  10. Nick January 28, 2015 at 2:30 am #

    Three different methods to remove services, etc. that run at Windows boot up. All at one website instead of needing to search for "how to remove installed as service" and finding the same old complicated Registry Editor or "command line" way to delete it. A while ago I installed a program that gave the option of having it run at system startup. It was uninstalled using the uninstaller, but now I want to try reinstalling it without getting two entries in the Standard Services menu. Your easy to understand instructions did the trick.

  11. madhu February 2, 2015 at 6:47 pm #

    Hi Martin,

    Thanks for the post. :)

  12. Sakthi May 4, 2015 at 10:14 am #

    It's very useful. Thank you very much.

  13. Yamanote March 21, 2016 at 3:29 pm #

    Before removing the service you should review the dependencies.

    You can check it:

    Open services.msc and find the service name, switch to the "Dependencies" tab.

    • michael clyde March 21, 2016 at 4:24 pm #

      what do you call it when someone states the obvious┬┐ Oh yeah, an ephifinized light bulb.

  14. Me April 4, 2016 at 12:07 pm #

    Thank you very much !!!

  15. Diego Garcia May 13, 2016 at 3:08 pm #

    Thank you so much, this was extremely helpful for me. I was uninstalling March Networks ESM, and the service MN Watchdog would refuse to go away, and the service was corrupt, so it would not start, so the application didn't work correctly. i ran the command, rebooted the computer, and it was gone for good. When I reinstalled the software from a different source, everything worked perfectly! So once again, thank you so much for this information!

Leave a Reply