Sign in to follow this  
Followers 0
RvdH

Kill Unstopable Service

7 posts in this topic

Anyone knows a way to stop/kill a service within auto-it app that can't be triggered with normal;

RunWait(@ComSpec & " /c " & 'net stop "<MyServive>"',"",@SW_HIDE)

SERVICE_NAME: <MyService>

TYPE : 10 WIN32_OWN_PROCESS

STATE : 4 RUNNING

(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)

WIN32_EXIT_CODE : 0 (0x0)

SERVICE_EXIT_CODE : 0 (0x0)

CHECKPOINT : 0x0

WAIT_HINT : 0x0

thx

Share this post


Link to post
Share on other sites



Looks like this service is one of those services that have their own handlers instead of the default handlers.

(Think they are called SIGINT handlers?)

Sorry, no help here.

#)

Share this post


Link to post
Share on other sites

What service is it?

Share this post


Link to post
Share on other sites

#4 ·  Posted (edited)

*cleared my post*

Edited by forger

Share this post


Link to post
Share on other sites

#5 ·  Posted (edited)

I'm talking about the "F-Prot Antivirus Update Monitor" its a little program which runs in the background and queries F-Prot server to check if new definitions are available

; uninstall/stop service
$servicename = "F-Prot Antivirus Update Monitor"

;ProcessClose("fpavupdm.exe")
;RunWait(@ScriptDir & '\F-Prot\fpavupdm.exe /uninstall')
;RunWait(@ComSpec & " /c " & 'net stop' & $servicename, "", @SW_HIDE)
    
RunWait(@SystemDir & "\sc.exe stop " & $servicename, "", @SW_HIDE)
RunWait(@SystemDir & "\sc.exe delete " & $servicename, "", @SW_HIDE)

none of the above seem to work, if i use sysinternals pskill, like:

RunWait(@ScriptDir & "\pskill -t fpavupdm", "", @SW_HIDE) it works instantly...

although i prefer to do everything from within auto-it my guess is that is the only method on how it succesfully can be done

Edited by RvdH

Share this post


Link to post
Share on other sites

I'm talking about the "F-Prot Antivirus Update Monitor" its a little program which runs in the background and queries F-Prot server to check if new definitions are available

If you post your final code here, I'm sure F-Prot will add AutoIT to the list of nasties and everybody will lose their compiled files once again.

You sure this is for a legitimate need? Approach F-Prot and ask them what the correct command to uninstall/stop their software is.

Share this post


Link to post
Share on other sites

Why on earth would you want to stop/delete a program that keeps your antivirus updated?

If the reason you want is what I think it is, then I'm sorry I even posted the solution.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0