Rogue Services on Windows

Take a service of QQ as an example:

1. Set the startup type of the Qpcore service to "disabled" in Computer Management-services
2. Run regedit and enter Hkey_local_machine\system\currentcontrolset\services\qpcore
3. Right-click on the Qpcore table key, permissions, advanced
4. Click Disable inheritance and convert the securable object to an explicit object.
5. Modify the system permissions and change from Full control to read.
6. The above method applies to most rogue services

Rogue Services on Windows