{"id":26,"date":"2008-02-22T19:50:32","date_gmt":"2008-02-22T14:20:32","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/how-to-remove-an-unwanted-service\/"},"modified":"2022-07-13T23:04:11","modified_gmt":"2022-07-13T17:34:11","slug":"how-to-remove-unwanted-service","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/how-to-remove-unwanted-service\/","title":{"rendered":"How to Delete a Windows Service in Windows 10\/11 and Earlier"},"content":{"rendered":"<p>Have you come across a situation where uninstalling software leaves its Service or driver entries in the registry, and Windows tries to load them at every boot, fails, and logs the error to the System Event log at every startup?<\/p>\n<p>This article tells you how to delete an orphaned service in Windows 10 (and earlier) using the registry, SC.exe command-line, PowerShell, or <a href=\"https:\/\/www.winhelponline.com\/blog\/clean-boot-windows-autoruns\/\">Autoruns<\/a>. Before proceeding further, create a <a href=\"https:\/\/www.winhelponline.com\/blog\/create-restore-protection-point-rollback-windows\/\">System Restore Point<\/a> and take a <a href=\"https:\/\/www.winhelponline.com\/blog\/automatically-backup-registry-hives-windows-10\/\">complete Registry backup<\/a>.<\/p>\n<p>If you find that <a href=\"#dependents\">no dependents<\/a> exist for a service, you can delete the leftover or unwanted Service in Windows using one of the following methods.<\/p>\n<p><!--more--><\/p>\n<div id=\"toc\">\n<p><strong>Contents<\/strong><\/p>\n<ol>\n<li><a href=\"#delete_service\">Delete a Service in Windows<\/a>\n<ul>\n<li><a href=\"#sc_command\">Method 1: <\/a><a href=\"#sc_command\">Using the SC.EXE command<\/a><\/li>\n<li><a href=\"#autoruns\">Method 2: Using Autoruns<\/a><\/li>\n<li><a href=\"#registry_editor\">Method 3: Using the Registry Editor<\/a><\/li>\n<li><a href=\"#powershell\">Method 4: Using PowerShell<\/a><\/li>\n<li><a href=\"#process_hacker\">Method 5: Using Process Hacker<\/a><\/li>\n<\/ul>\n<\/li>\n<li><a href=\"#dependents\">INFO: View Dependents of a Service<\/a><\/li>\n<\/ol>\n<\/div>\n<h2><a id=\"delete_service\"><\/a>How to Delete a Service in Windows?<\/h2>\n<p>You can delete a service using the built-in SC.exe command-line, the Registry Editor, PowerShell, or a utility like Autoruns. Follow one of these methods:<\/p>\n<h3><a id=\"sc_command\"><\/a>Using the SC command<\/h3>\n<p>The <code>SC.EXE<\/code> command-line tool in Windows can be used to create, edit, or delete Services. To delete a service in Windows, use the following command-line syntax from <a href=\"https:\/\/www.winhelponline.com\/blog\/open-elevated-command-prompt-windows\/\">admin Command Prompt<\/a>:<\/p>\n<pre>sc delete service_name<\/pre>\n<p><a id=\"service_name\"><\/a><br \/>\nWhere <strong>service_name<\/strong> refers to the short name of the service, instead of its display name. To find the short name, open Services MMC and double-click a service.<\/p>\n<ul>\n<li>Example 1: Google Update Service (<code>gupdate<\/code>) is the display name, and <code>gupdate<\/code> is the short name.<\/li>\n<li>Example 2: Dell SupportAssist (<code>SupportAssistAgent<\/code>) is the display name, and <code>SupportAssistAgent<\/code> is the short name.<br \/>\n<img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-24152\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2008\/02\/dell-supportassist-service.png\" alt=\"service short name services mmc\" width=\"406\" height=\"468\" \/><\/li>\n<\/ul>\n<div class=\"qt\">\n<p>Another way to find the short name of a service is by using this command-line:<\/p>\n<pre>sc query type= service | more<\/pre>\n<p>The above command lists all the services along with the service (short) name and the display name.<\/p>\n<p>Or, if you know the display name, you can find the service name using this command:<\/p>\n<pre>sc getkeyname \"service display name\"<\/pre>\n<p>which in this example is:<\/p>\n<pre>sc getkeyname \"Google Update Service (gupdate)\"<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/05\/svc_name_1.png\" alt=\"delete a service in windows - leftover service\" width=\"524\" height=\"116\" \/><\/p>\n<\/div>\n<p>Once the <a href=\"http:\/\/support.microsoft.com\/kb\/271362\" target=\"_blank\" rel=\"noopener nofollow noreferrer\">service short name<\/a> is obtained using any of the above methods, use this command to delete the Service:<\/p>\n<pre>sc delete test<\/pre>\n<p>You&#8217;ll see the output: <strong>[SC] DeleteService SUCCESS<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-9305\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2008\/02\/sc-delete-service.png\" alt=\"delete a service in windows - leftover service\" width=\"699\" height=\"111\" \/><\/p>\n<p>This deletes the specified service (&#8220;test&#8221; service in this example) from the computer.<\/p>\n<p><em>If the service is running or another process has an <a href=\"https:\/\/www.winhelponline.com\/blog\/find-process-locked-file-openfiles-utility\/\">open handle<\/a> to the service, it will be marked for deletion and removed on the next reboot.<\/em><\/p>\n<div class=\"qt\">\n<h4>Can&#8217;t delete a service?<\/h4>\n<p>If you receive the following error when deleting the service, it could also be possible that you&#8217;re trying to delete a service from a normal Command Prompt instead of an <a title=\"How to Open Elevated or Admin Command Prompt in Windows?\" href=\"https:\/\/www.winhelponline.com\/blog\/open-elevated-command-prompt-windows\/\">admin Command Prompt<\/a>.<\/p>\n<p>Should the same error occur in an admin Command Prompt,\u00a0then it means that the currently logged on user account doesn&#8217;t have full control permissions for that service.<\/p>\n<pre class=\"err\">[SC] OpenService FAILED 5:\r\nAccess is denied.<\/pre>\n<p>To resolve this error when deleting a service, you need to <a href=\"https:\/\/www.winhelponline.com\/blog\/view-edit-service-permissions-windows\/\">modify the Service permissions first<\/a>. Alternatively, you can use the <a title=\"How to Run a Program as SYSTEM (LocalSystem) Account in Windows\" href=\"https:\/\/www.winhelponline.com\/blog\/run-program-as-system-localsystem-account-windows\/\">SYSTEM<\/a> or <a title=\"How to Run Programs as TrustedInstaller to Write to Certain Registry Keys or Files\" href=\"https:\/\/www.winhelponline.com\/blog\/run-program-as-trustedinstaller-locked-registry-keys-files\/\">TrustedInstaller<\/a> account to delete the service.<\/p>\n<\/div>\n<hr \/>\n<div class=\"rp\"><strong>RELATED:<\/strong> <a href=\"https:\/\/www.winhelponline.com\/blog\/windows-10-default-services-configuration\/\">Windows 10 Default Services Configuration<\/a><\/div>\n<h3><a id=\"autoruns\"><\/a>Using Autoruns from Windows Sysinternals<\/h3>\n<p><a title=\"Autoruns\" href=\"http:\/\/www.microsoft.com\/technet\/sysinternals\/systeminformation\/autoruns.mspx\" target=\"_blank\" rel=\"noopener noreferrer\">Autoruns<\/a>, from Microsoft Windows Sysinternals, is a <em>must-have<\/em> tool that helps you manage Windows startup, services, drivers, Winsock providers, Internet Explorer add-ons, Shell extensions, etc.<\/p>\n<ol>\n<li>Download Autoruns and run it<\/li>\n<li>From the Options tab, tick <strong>Hide Microsoft Entries<\/strong>\u00a0so that only the third-party entries are listed.<\/li>\n<li>Press <kbd>F5<\/kbd> to refresh the listing.<\/li>\n<li>Click the <b>Services<\/b> tab to delete the service(s) that are unwanted or leftover.<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/05\/svc_name_5.png\" alt=\"Delete unwanted services\" width=\"599\" height=\"465\" \/><\/li>\n<li>Close Autoruns.<\/li>\n<\/ol>\n<hr \/>\n<h3><a id=\"registry_editor\"><\/a>Using the Registry Editor<\/h3>\n<p>To manually delete a service directly via the Windows Registry, use these steps:<\/p>\n<ol>\n<li>Start <code>Regedit.exe<\/code> and navigate to the following branch:\n<pre>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services<\/pre>\n<figure id=\"attachment_24150\" aria-describedby=\"caption-attachment-24150\" style=\"width: 737px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-24150 size-full\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2008\/02\/delete-service-regedit.png\" alt=\"delete a windows service registry editor\" width=\"747\" height=\"288\" \/><figcaption id=\"caption-attachment-24150\" class=\"wp-caption-text\">Dell SupportAssist service registry key<\/figcaption><\/figure>\n<p>Each sub-key under the above registry key represents a driver or a Service. The key name is the same as the <a href=\"#service_name\">short name<\/a> of the service. Also, you should be able to identify the entry easily by looking at the <b>DisplayName<\/b> and <b>ImagePath<\/b> values in the right pane in the Registry Editor.<\/li>\n<li>Find the entry you want to delete.<\/li>\n<li>Backup the appropriate key by <a href=\"https:\/\/www.winhelponline.com\/blog\/how-to-use-reg-files-registration-entries-windows\/#export\">exporting it<\/a> to a .reg file.<\/li>\n<li>Once exported, right-click the key, and choose Delete.<\/li>\n<li>Exit the Registry Editor.<\/li>\n<\/ol>\n<hr \/>\n<h3><a id=\"powershell\"><\/a>Using PowerShell<\/h3>\n<p>From the PowerShell administrator window, you can use the following commands to delete a service.<\/p>\n<pre>$service = Get-WmiObject -Class Win32_Service -Filter \"Name='servicename'\"\r\n$service.delete()<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-9304\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2008\/02\/powershell-delete-service.png\" alt=\"delete a service in windows - powershell\" width=\"700\" height=\"319\" \/><\/p>\n<p><strong>ReturnValue<\/strong> of <code>0<\/code> indicates that the operation was successful. The service is deleted and will no longer show up in the Services MMC.<\/p>\n<p><em>To know the meaning of a return value, check out the Microsoft article <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/desktop\/cimwin32prov\/delete-method-in-class-win32-service\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Delete method of the Win32_Service class<\/a><\/em><\/p>\n<div class=\"qt\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-9189\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/08\/information-icon.png\" alt=\"delete a service in windows - leftover service\" width=\"48\" height=\"48\" \/>Or you can run the <a href=\"#sc_command\">sc.exe command<\/a> in PowerShell. That would work too. But you need to specify the extension (<code>sc.exe<\/code>) when running it in PowerShell. This is because the command <code>SC<\/code> (without mentioning the extension <code>.exe<\/code>) will be interpreted as <code>Set-Content<\/code> which is a built-in cmdlet in PowerShell.<\/div>\n<p>It&#8217;s even easier if you have PowerShell 6.0 installed. In PowerShell 6 and higher, you can use this syntax to remove a service:<\/p>\n<pre>Remove-Service -Name ServiceName<\/pre>\n<p>Running the <code>Remove-Service<\/code> command in older versions of PowerShell (&lt;6.0) shows the error: <em>The term &#8216;Remove-Service&#8217; is not recognized as the name of a cmdlet, function, script file, or operable program.<\/em><\/p>\n<hr \/>\n<h3><a id=\"process_hacker\"><\/a>Using Process Hacker<\/h3>\n<p>Process Hacker is a good process management utility that is similar in appearance to Microsoft&#8217;s Process Explorer. With Process Hacker, you can easily delete a service via the right-click menu.<\/p>\n<figure id=\"attachment_24151\" aria-describedby=\"caption-attachment-24151\" style=\"width: 690px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-24151 size-full\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2008\/02\/process-hacker-delete-service.png\" alt=\"delete a windows service process hacker\" width=\"700\" height=\"450\" \/><figcaption id=\"caption-attachment-24151\" class=\"wp-caption-text\">Delete a service using Process Hacker. e.g., Dell SupportAssist service<\/figcaption><\/figure>\n<p>Start Process Hacker as administrator.\u00a0Switch to the Services tab, right-click on the service you want to remove, and click Delete.<\/p>\n<p><em>(As a side note, you can also configure <a href=\"https:\/\/www.winhelponline.com\/blog\/view-edit-service-permissions-windows\/\">service permissions<\/a> using Process Hacker.)<\/em><\/p>\n<p>Download Process Hacker from <code>https:\/\/processhacker.sourceforge.io\/<\/code><\/p>\n<hr \/>\n<h2><a id=\"dependents\"><\/a>View Dependents of a Service<\/h2>\n<p>When you remove a service, others that depend upon the service will fail to start, returning the error &#8220;<em>System error 1075 has occurred.<\/em> The dependency service does not exist or has been marked for deletion.&#8221;. When a driver or service entry is leftover in the registry, but the corresponding files are missing, the Event Log would record an entry with <code>ID:7000<\/code> at every start.<\/p>\n<pre class=\"err\">Log Name: System\r\nSource: Service Control Manager\r\nDate:\r\nEvent ID: 7000\r\nLevel: Error\r\nDescription:\r\n<strong>The DgiVecp service failed to start due to the following error:<\/strong>\r\n<strong>The system cannot find the file specified.<\/strong><\/pre>\n<p>So, it&#8217;s advisable first to check if there are any dependents. You can check that in Services MMC by double-clicking on the item you&#8217;re going to delete and clicking the Dependencies tab. The list of components that depend on that service is shown below. Here is an example where &#8220;Fax&#8221; depends on &#8220;Print Spooler&#8221; to start.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/05\/svc_name_3.png\" alt=\"Delete unwanted services\" width=\"406\" height=\"468\" \/><\/p>\n<p>While most third-party services don&#8217;t have any dependents, some do. It&#8217;s always advisable to take a look at this tab before clearing the item.<\/p>\n<div class=\"qt\">\n<p>Another way to verify the dependents is to run this command from a Command Prompt window. (example, <i>Print Spooler<\/i>)<\/p>\n<pre>sc enumdepend spooler<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full\" src=\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/05\/svc_name_4.png\" alt=\"Delete unwanted service in windows\" width=\"414\" height=\"239\" \/><\/p>\n<\/div>\n<p>The information in this article applies to all versions of Windows, including Windows 11.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Have you come across a situation where uninstalling software leaves its Service or driver entries in the registry, and Windows tries to load them at every boot, fails, and logs the error to the System Event log at every startup? This article tells you how to delete an orphaned service in Windows 10 (and earlier) &#8230; <a title=\"How to Delete a Windows Service in Windows 10\/11 and Earlier\" class=\"read-more\" href=\"https:\/\/www.winhelponline.com\/blog\/how-to-remove-unwanted-service\/\" aria-label=\"Read more about How to Delete a Windows Service in Windows 10\/11 and Earlier\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":10210,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[6,7],"tags":[56,441,490],"class_list":["post-26","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-utilities","category-windows","tag-autoruns","tag-registry","tag-services"],"jetpack_featured_media_url":"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/07\/services-header.png","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":4892,"url":"https:\/\/www.winhelponline.com\/blog\/task-manager-startup-tab-entries-remove-invalid\/","url_meta":{"origin":26,"position":0},"title":"How to Remove Invalid Entries from Task Manager Startup tab","author":"Ramesh","date":"December 19, 2016","format":false,"excerpt":"Managing startup entries was possible using the System Configuration Utility (msconfig.exe), in Windows 7 and earlier. This functionality is now provided by the Task Manager in Windows 8, Windows 10, and Windows 11, which features a new \"Startup\" tab that lists all auto-start entries in the system. You can enable\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"store app startup entries","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/12\/store-app-startup-entries.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/12\/store-app-startup-entries.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2016\/12\/store-app-startup-entries.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":77847,"url":"https:\/\/www.winhelponline.com\/blog\/mdnsnsp-bonjour-blocked-lsa\/","url_meta":{"origin":26,"position":1},"title":"mdnsNSP.dll (Bonjour) is Blocked from loading into LSA","author":"Ramesh","date":"February 10, 2025","format":false,"excerpt":"When you start Windows, the Program Compatibility Assistant notification dialog launches, mentioning that the module mdnsNSP.dll has been blocked from loading. This module is blocked from loading into the Local Security Authority. \\Device\\HarddiskVolume#\\Program Files\\Bonjour\\mdnsNSP.dll For more information on why this module has been blocked, click 'Learn more'. Cause This error\u2026","rel":"","context":"In &quot;Utilities&quot;","block_context":{"text":"Utilities","link":"https:\/\/www.winhelponline.com\/blog\/category\/utilities\/"},"img":{"alt_text":"mdnsnsp.dll blocked from loading - winsock provider","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2025\/02\/mdnsnsp-bonjour-module-lsa-error.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2025\/02\/mdnsnsp-bonjour-module-lsa-error.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2025\/02\/mdnsnsp-bonjour-module-lsa-error.png?resize=525%2C300&ssl=1 1.5x"},"classes":[]},{"id":31386,"url":"https:\/\/www.winhelponline.com\/blog\/windows-update-services-deleted-every-restart\/","url_meta":{"origin":26,"position":2},"title":"Windows Update services are deleted at every restart","author":"Ramesh","date":"December 30, 2022","format":false,"excerpt":"After you restore the missing Windows Update, BITS, or the Update Orchestrator Service services using registry files, you find that the services vanish again after a restart. They don't appear in the Services MMC. Cause This issue happens if your computer is infected. Malware running as a service or scheduled\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"autoruns check virus total","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/12\/autoruns-check-virustotal.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":76085,"url":"https:\/\/www.winhelponline.com\/blog\/task-manager-startup-tab-guid-number\/","url_meta":{"origin":26,"position":3},"title":"Task Manager Startup tab has two strange entries (a GUID and a number)","author":"Ramesh","date":"July 25, 2024","format":false,"excerpt":"After installing or uninstalling a game app, two strange startup entries may appear in the Startup tab of Task Manager. One entry may be a random Globally Unique Identifier (GUID) string, and the other may be a number. The GUID string (starting from\"48904102-2daa\") varies from system to system, as it\u2026","rel":"","context":"In &quot;Windows 10&quot;","block_context":{"text":"Windows 10","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/windows-10\/"},"img":{"alt_text":"task manager strange startup entry - a guid and a number","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/af_guid-counter-taskmgr.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/af_guid-counter-taskmgr.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/af_guid-counter-taskmgr.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2024\/07\/af_guid-counter-taskmgr.png?resize=700%2C400&ssl=1 2x"},"classes":[]},{"id":8349,"url":"https:\/\/www.winhelponline.com\/blog\/error-1083-executable-service-configured-not-implement-service\/","url_meta":{"origin":26,"position":4},"title":"Error 1083 &#8220;The executable program that this service is configured to run in does not implement the service&#8221;","author":"Ramesh","date":"March 29, 2019","format":false,"excerpt":"When you attempt to start some Windows services using the Services MMC or command-line, error 1083 or 1053 is shown, and the service fails to start. Here is the error message verbatim: Windows could not start the [service name] service on Local Computer.Error 1083: The executable program that this service\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"fix for services error 1083 and 1053","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2019\/03\/service-error-1083-fix-1.png?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":5924,"url":"https:\/\/www.winhelponline.com\/blog\/black-screen-command-prompt-open-logon-no-explorer-shell\/","url_meta":{"origin":26,"position":5},"title":"Black Screen and Command Prompt Open at Logon &#8211; No Explorer Shell","author":"Ramesh","date":"November 4, 2017","format":false,"excerpt":"Due to a crypto-malware infection in the computer, after logging in to your user account, a black screen appears with a Command Prompt window open. Your desktop, taskbar, and the wallpaper (explorer shell) don't get loaded unless you type explorer.exe in the Command Prompt window manually. This problem may continue\u2026","rel":"","context":"In &quot;Windows&quot;","block_context":{"text":"Windows","link":"https:\/\/www.winhelponline.com\/blog\/category\/microsoft\/windows\/"},"img":{"alt_text":"black screen startup command prompt opens","src":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/shell-comspec-malware.png?resize=350%2C200&ssl=1","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/shell-comspec-malware.png?resize=350%2C200&ssl=1 1x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/shell-comspec-malware.png?resize=525%2C300&ssl=1 1.5x, https:\/\/i0.wp.com\/www.winhelponline.com\/blog\/wp-content\/uploads\/2017\/11\/shell-comspec-malware.png?resize=700%2C400&ssl=1 2x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/26","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/comments?post=26"}],"version-history":[{"count":0,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/posts\/26\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media\/10210"}],"wp:attachment":[{"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/media?parent=26"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/categories?post=26"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.winhelponline.com\/blog\/wp-json\/wp\/v2\/tags?post=26"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}