program AntiBlackWM;

{$APPTYPE CONSOLE}

uses
  Windows,
  WinSvc;

function DeleteNTService(ServiceName: string): boolean;
var
  hServiceToDelete, hSCMgr: SC_HANDLE;
begin
  Result := False;
  hSCMgr := OpenSCManager(nil, nil, SC_MANAGER_CREATE_SERVICE);
  if hSCMgr <> 0 then
  begin
    hServiceToDelete := OpenService(hSCMgr, PChar(ServiceName), SERVICE_ALL_ACCESS);
    Result := DeleteService(hServiceToDelete);
    CloseServiceHandle(hSCMgr);
  end;
end;

function StopSvc(const aServiceName: PChar): boolean;
var
  HManager, HService:  SC_Handle;
  ServiceStatus:  TServiceStatus;
  dwCheckPoint:  DWord;
begin
  HManager := OpenSCManager('', nil, SC_MANAGER_CONNECT);
  if HManager > 0 then
  begin
    HService := OpenService(HManager, aServiceName, SERVICE_STOP or SERVICE_QUERY_STATUS);
    if HService > 0 then
      if ControlService(HService, SERVICE_CONTROL_STOP, ServiceStatus) then
        if QueryServiceStatus(HService, ServiceStatus) then
        begin
          while SERVICE_STOPPED <> ServiceStatus.dwCurrentState do
          begin
            dwCheckPoint := ServiceStatus.dwCheckPoint;
            Sleep(ServiceStatus.dwWaitHint);
            if not QueryServiceStatus(HService, ServiceStatus) then Break;
            if ServiceStatus.dwCheckPoint < dwCheckPoint then Break;
          end;
        end;
    CloseServiceHandle(HService);
    CloseServiceHandle(HManager);
  end;
  Result := SERVICE_STOPPED = ServiceStatus.dwCurrentState;
end;

procedure Main;
var
  SvcName, FileName: String;
begin
  Writeln('AntiBlackWM');
  Writeln('');
  if ParamCount <> 2 then
  begin
    Writeln('Enter Service Name:');
    Readln(SvcName);
    Writeln('Enter File Name:');
    Readln(FileName);
  end else
  begin
    SvcName := ParamStr(1);
    FileName := ParamStr(2);
  end;
  StopSvc(PChar(SvcName));
  DeleteNTService(SvcName);
  DeleteFile(PChar(FileName));
  Writeln('Trojian uninstalled');
  Writeln('Press enter to exit.');
  Readln;
end;

begin
  Main;
end.