Sysmon64 not remove

[carden1985den]

I'm trying to remove Sysmon64 -u force, serice not remove, I can't remove the stuck service through the SC service management
C:\Distrib\Servers>Sysmon64.exe -u force
System Monitor v15.15.0.1 - System activity monitor
By Mark Russinovich and Thomas Garnier
Copyright (C) 2014-2024 Microsoft Corporation
Using libxml2. libxml2 is Copyright (C) 1998-2012 Daniel Veillard. All Rights Reserved.
Sysinternals - www.sysinternals.com

Stopping the service failed:
The system cannot find the file specified.
DeleteService failed:
Access is denied.
Removing service files...............................
Failed to delete C:\Windows\Sysmon64.exe

C:\Distrib\Servers>sc delete sysmon64
[SC] DeleteService FAILED 5:

Access is denied.

[carden1985den]

also i try delete with elevated prompt, take no affect

[foxmsft]

Make sure Windows Event Viewer is not running at the time, and the uninstall should succeed from an elevated console.

Otherwise, manually remove the Registry keys for Sysmon:

• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysmonDrv
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sysmon64

and reboot the system, after which Sysmon won't be running and C:\Windows\Sysmon64.exe, C:\Windows\SysmonDrv.sys can be deleted.