Solved Can't remove SABBv1b Service!!

[Ahmad64]

Hi
When stop/kill this service or delete its registery folder, it restart / recreate itself.
Unfortunately I understood that it tries to coonect to internet too!

I also run the command successfully: "SC delete SABBv1b" ,but as I mentioned it starts again.
If I delete it's file C:\Windows\System32\sasvc.exe, It will be copied and started again.

BTW, I use Microsoft security essentials and with Process Explorer I don't see another suspecious process!

What process/service recreates it?
How can I get rid of this?
_____________________ // Service Query //__________________
SERVICE_NAME: SABBv1b
TYPE : 110 WIN32_OWN_PROCESS (interactive)
STATE : 4 RUNNING
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

 

[Ahmad64]

I found the other suspecious process!!!

MCMUv2 ( C:\Windows\system32\bmon.exe )

They work like brothers, when I killed one of them, its brother recreates the other!!!

First I fooled both of processes by changing their Image Path Registery Key!
Then I killed and deleted them one by one.

)

 

[gregrocker]

Run a full scan with Malwarebytes, SUPERAntiSpyware and Windows Defender Offline

If you can System Restore to the point before you installed the USB adapter which uses that Service, I would do that as well.

If not you may want to consider a Clean Reinstall - Factory OEM Windows 7