Services in the Windows operating system are background processes that usually require no user interaction. They are automatically started with Windows, or when a certain event occurs that triggers them. Most system administrators distinguish between first party and third party services. First party services have been installed with the operating system, they are from Microsoft and many are core parts of the OS. Disabling a core service could have serious consequences; Windows may stop booting, Internet may not work anymore or the printer refuses to print.
Third party services on the other hand are added by third party developers like Google, Apple or the company that developed the antivirus software that you have installed on the system.
These services sometimes cause problems, for instance if they are still listed under services even if the application has been long removed from the copy of Windows. Malicious software may add services as well sometimes and it may be necessary to delete them when your antivirus software is not able to.
But how can you remove services from Windows? The following guide highlights three different options; A command line tool, the Windows Registry and a third party software.
Removing Services from the command line
This is probably the most complex solution. You may need to open an elevated command prompt first, depending on the version of Windows. You can try and open the command line normally with the hotkey Windows-r, typing cmd and pressing enter. If you issue the command and get an error that you need administrative privileges you need to click on the Windows start orb, select Programs (or All Programs), then Accessories. Locate Command Prompt, right-click the item in the start menu and select Run as Administrator from the context menu. This triggers an UAC prompt under Vista and Windows 7 that needs to be accepted.
The command prompt displays Administrator: Command Prompt if the operation was successful.
Windows 7 and Vista users who have the search box enabled in the start menu can enter cmd instead in the box to open the elevated command prompt with Ctrl-Shift-Enter.
Windows Services are deleted with the command sc delete followed by the name of the service. Since it is likely that you do not know the name you need to open the Windows Services listing. This is done with the keys Windows-r, typing services.msc and enter on the keyboard.
What you need is the service name, not the display name that is shown in the main listing. The names may be identical sometimes. Double-click the service that you want to delete to see both names. Apple Mobile Device is for instance the service name and display name of the service. Microsoft on the other hand often uses short cryptic service names and longer display names. The Bitlocker Drive Encryption Service (display name) is listed with the service name BDESVC.
The name may have implications on the command. Lets say we want to delete the Apple Mobile Device service, a leftover after uninstalling iTunes. The command to do that on the command line is sc delete ?Apple Mobile Device?.
Notice the brackets around the service?s name? A space is generally seen as a new command or parameter, which means that it is necessary to use brackets if names or commands make use of spaces. Take a look at the screenshot below to see what happens if the command is issued without brackets, and then with.
To paraphrase: To delete services from the command line you need to do the following:
- Open an elevated command prompt
- Open the Windows Services management listing
- Identify the service name and not the display name by double-clicking on a service.
- Run the command, make sure you use brackets if the name contains spaces.
- The message [SC] DeleteService SUCCESS indicates that the service has been successfully removed from the operating system.
Deleting Services in the Windows Registry
All services are listed in the Windows Registry. If a service?s Registry key is removed, it will be deleted from the system. This method is a lot faster usually. Here is how it is done:
Use the hotkey Windows-r to open a run box, enter regedit in the box and press enter. Some users may see an UAC prompt that they need to accept.
The window displays folders on the left side, and subfolders or parameters on the right. Locate the following Registry key by following the folder structure on the left.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services
A click on services lists all available Windows Services as subfolders of that key. Please note that the service?s Service Name is used as the folder name which means that you may need to open the Services listing once again to identify the right services.
I suggest you backup the key first before you start deleting services. Left-click on the services folder and select File > Export to backup the key. Type in a file name and save it to the hard drive.
You can import the backed up key again by selecting File > Import and the file that you have previously exported.
Locate the service that you want to delete in the listing. A left-click selects the service and displays its parameters on the right pane. To remove a service press delete on the keyboard, or right-click the service and select delete from the context menu.
To paraphrase this method:
- Open the Windows Registry
- Navigate to the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services
- Backup the services key
- Identify the service that you want to delete
- Left-click on that service and press delete on the keyboard
Using Third Party Software To Remove Windows Services
This method is probably the easiest from them all. All you need to do is to download the popular software Autoruns, which is freely available from Microsoft. The program is portable which means that it does not need to be installed after unpacking. Run autoruns.exe.
The program lists everything that gets started during Windows start. Locate the Services tab at the top and click it. All first and third party services are listed here by default.
You may want to filter out Microsoft services if you want to delete a third party service. Click on Options > Hide Microsoft and Windows Entries and press F5 afterwards to refresh the listing.
Locate the service that you want to delete and select it with a left-click. Press delete on the keyboard and confirm the deletion in the Windows that opens. Some Windows users may receive an access denied message. That?s when the software is not run with elevated privileges. Just select Run as Administrator to restart Autoruns with administrative privileges and accept the UAC prompt if it is displayed.
Perform the removal operation again, this time it should work. The entry is removed from the services listing immediately on success.
To summarize this method:
- Download the free software Autoruns from Microsoft
- Switch to the services tabs
- Locate the service you want to delete
- Left-click the service, press delete and confirm the deletion
Closing Words
This three methods should be enough to delete services in the Windows operating system. Autoruns is without doubt the most comfortable solution, the other two methods are on the other hand ?built-in? which has its advantages as well.
It sometimes may be more efficient to stop and disable the Service instead of deleting it. This can be done best via the services.msc listing.
Related Articles:
How To Remove Third Party Services In WindowsConfigure Windows 7 Services To Start Delayed
How To Enable IPv6 On Windows XP
Manage Windows Services
Windows Services Optimizer SMART
Nice article Martin. Any recommendation on how to check if the services are legit or not before removing it. For example random named services created by malware or viruses.
Well you can look at the path of the executable for a start, this is done with a right-click on Properties in autoruns or a double-click in the services listing. I prefer to use autoruns because of its option to hide native Windows services. But you are usually left with a search on Bing, or whichever search engine you use, to find out more about a specific service. And if you are not sure if you need the service you can disable and stop it to see what happens.
It will be nice a button to print the article in a ?print compatible? way? If there is already one, I missed it? :-(
I have added a print button per your request. You find it below each single article.
Another great article. Came a day too late ? Yesterday I removed a couple of erroneous services using Autoruns ? made it so easy! :)
Very well written?. Found solution to many of the problems
My most used method to remove NT services is via the Windows Registry (sometimes automated with command line tools).
There are some things that should be noted:
Windows 2000 does not come with the sc.exe utility (however, it might have been available with the Windows 2000 resource kit)
Not all services the are installed with the operating system are first party. For example, Windows XP (any service pack level) comes with a SafeDisc DRM driver that was controllable as a (hidden) service.
Checking the list generated by services.msc often does not accurately enumerate all services; it only enumerates those that are not set to hidden. To enumerate from all services, the Windows Registry may be examined.
Q thanks for the additional tips, you are right of course but I did not want to blow the article out of proportions.