A,
Windows service Windows service, also known as WindowsService, it is the foundation of Windows and Windows Caozuojitong network, which belongs to the core part of the system, which supports a variety of operations throughout Windows. Services such as DNS clients, print programs, Windows update services, scheduled tasks, Windows time services, alarms, etc., are related to whether the machine can operate correctly. If these services are not properly managed, it will affect the normal operation of the machine.
a first service is a Win32 executable, or yes yes rundll32.exe to run a .dll process of the formation of the way.
not the same as with ordinary applications, such as opening Word, there is one interface out, but the service has no user interface. It is also not possible to run by directly double-clicking the corresponding .exe program. That is how to control a Windows service?
Windows service from the level services.exe more on the management of this service, which it manages, responsible for the service to start, stop, run, pause, etc. . Our most common operation is to complete the related operations through the Windows service MMC interface.
Second, how to remove Windows service
now rogue software, more and more registers itself as a service. In the Hijackthis scan log, the general will of services to non-Windows system listed 023 ways, such as the following passage:
O23- unknown -Service: BKMARKS [provide data security protection mechanisms of transport protocol, Effectively maintain security and integrity in data transmission. ] -C: WindowsSYSTEM32RUNDLL.EXE
O23- unknown -Service: ewidoanti-spyware4.0guard [ewidoanti-spyware4.0guard] -D: ProgramFilesewidoanti-spyware4.0guard.exe
O23- unknown -Service: KSD2Service [KSD2Service] -C: Windowssystem32SVCH0ST.exe
for these rogue software, need to remove the associated .exe file so that it can no longer run, or directly remove the service itself, so that when the computer is restarted , it won't start again. Source:
www.examda.com
deleted there are two ways:
a way: using the Windows command sc.exe
start - - Run - cmd.exe, then type sc to see it. The solution is simple to use: scdelete "service name" (such as scdeleteService83F9085F) As for the above: scdeleteKSD2Service
two: direct registry edit (not recommended)
Open the Registry Editor, Find the following key: HKEY_LOCAL_MacHINESYSTEMCurrentControlSetServices, the general service will display a main key here with the same name, directly delete the relevant key values. (Under HKEY_CURRENT_USERSYSTEMCurrentControlSetServices may have, can be found in the registry, delete)
three special circumstances
1, if the service shows rundll32.exe, and this file is located in system32 directory, Then you can't delete the rundll32.exe file, which is a file on the Windows system. Then just remove the relevant services will be able to
2, if a service automatically deleted immediately established, indicating that there is a background process monitoring, protection. You need to kill the corresponding process in the process manager first, or press F8 after startup to delete it in safe mode.