Just noticed that service deletion is not working because my ServiceName is 7 bytes long (2 push with null byte). So 2 choices. Recode the whole shellcode with a 8 bytes ServiceName and all change that include :(.
Change psexec.rb rand_text_alpha(8) to rand_text_alpha(7) that sounds a better solution ! :D