Windows Service, also known as Windows Service, it is the Windows operating system and Windows-based networks, part of the core part of the system, which supports a variety of operating the entire Windows. Such as the DNS client, print programs, Windows Update Services, Scheduled Tasks, Windows Time Service, alarm devices and other services, whether they relate to the machine correctly. If you can not properly manage these services, will affect the normal operation of the machine.
A service first and foremost a Win32 executable program, or yes yes rundll32.exe to run one. Dll way of the formation process. Not the same as an ordinary application, such as opening WORD, there is an interface for it, but service is not user interface. Nor can double-click to run directly to the appropriate. Exe program to run. That is how to control a Windows service?
Service is provided by Windows, even on the level services.exe this service to manage, which it has managed to carry out service to start, stop, run, pause and so on. We are the most common operation is through the Windows services MMC interface to complete the relevant operations.
Second, how to remove the Windows Service
Now rogue software, more and more himself registered as a service. In the Hijackthis scan log, the general will of non-Windows system services to 023 ways listed, as the following period:
O23 - Unknown - Service: BKMARKS [transport protocol to provide data security protection mechanisms to effectively safeguard the security of data transmission and integrity. ] - C: \ WINDOWS \ SYSTEM32 \ RUNDLL.EXE
O23 - Unknown - Service: ewido anti-spyware 4.0 guard [ewido anti-spyware 4.0 guard] - D: \ Program Files \ ewido anti-spyware 4.0 \ guard.exe
O23 - Unknown - Service: KSD2Service [KSD2Service] - C: \ WINDOWS \ system32 \ SVCH0ST.exe
For these rogue software, need to remove the relevant. Exe files, so that it can no longer running, or directly remove the service itself, so that when the computer is restarted, it will not re-start.
There are two ways to delete:
Approach one: The sc.exe the Windows command
Start - Run - cmd. Exe, and then enter the sc can be seen. Method to use is very simple:
sc delete "Service Name" (if there are spaces in the middle of the service name, you need to add quotation marks before and after)
As for the above: sc delete KSD2Service
.
Method 2: Direct to the Registry Editor (not recommended)
Open the Registry Editor, locate the following key:
HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services General Services with the same name will be shown here a primary key, simply delete the relevant keys will be.
3, special circumstances
1, if the service shows rundll32.exe, and this file is located in system32 directory, then it can not delete this rundll32.exe file, which is the Windows system files. At this time-related services as long as the removal can be a
2, if a service they immediately removed automatically created, and explain the background there are processes to monitor and protect. Need to kill in the process manager in the corresponding process, or to start and press F8, to safe mode to delete.
4, other references
Remove third-party tools such as using ICEWORD
No comments:
Post a Comment