Can't remove SABBv1b Service!!


  1. Posts : 10
    Windows 7 Ultimate x64
       #1

    Can't remove SABBv1b Service!!


    Hi
    When stop/kill this service or delete its registery folder, it restart / recreate itself.
    Unfortunately I understood that it tries to coonect to internet too!

    I also run the command successfully: "SC delete SABBv1b" ,but as I mentioned it starts again.
    If I delete it's file C:\Windows\System32\sasvc.exe, It will be copied and started again.

    BTW, I use Microsoft security essentials and with Process Explorer I don't see another suspecious process!

    What process/service recreates it?
    How can I get rid of this?
    _____________________ // Service Query //__________________
    SERVICE_NAME: SABBv1b
    TYPE : 110 WIN32_OWN_PROCESS (interactive)
    STATE : 4 RUNNING
    WIN32_EXIT_CODE : 0 (0x0)
    SERVICE_EXIT_CODE : 0 (0x0)
    CHECKPOINT : 0x0
    WAIT_HINT : 0x0
      My Computer


  2. Posts : 10
    Windows 7 Ultimate x64
    Thread Starter
       #2

    :) I found the other suspecious process!!!

    MCMUv2 ( C:\Windows\system32\bmon.exe )

    They work like brothers, when I killed one of them, its brother recreates the other!!!

    First I fooled both of processes by changing their Image Path Registery Key!
    Then I killed and deleted them one by one.

    :))
      My Computer

  3.    #3

    Run a full scan with Malwarebytes, SUPERAntiSpyware and Windows Defender Offline

    If you can System Restore to the point before you installed the USB adapter which uses that Service, I would do that as well.

    If not you may want to consider a Clean Reinstall - Factory OEM Windows 7
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:12.
Find Us