n –Service: ewido anti-spyware 4.0 guard [ewido anti-spyware 4.0 guard] - D:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 – unknown –Service: KSD2Service [KSD2Service] - C:\WINDOWS\system32\SVCH0ST.exe
For those gangster software, we have to delete relevant .exe files, stopping them running again, or directly eliminating the service. When the computer restarts, it would start again.
There’re two ways to delete:
Methods 1: use sc.exe Windows command.
Start—run—cmd.exe, and then type sc, then you can see it. It’s quite easy.
Sc delete “service name” (if there’s a blank in the service name, then you need to add quotation marks)
For the one above: sc delete KSD2Service
Method two: directly edit registry
Open REGEDIT, find the key value below:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services, generally, service would display a primary key here in a same name, directly delete the relevant key value.
3. Special situation
1) If the service shows rundll32.exe, besides, the file is under system32 directory, then you should not delete the rundll32.exe file, it’s Windows system file. At this moment, just clear relevant services.
2) If one service auto forms again after being deleted, then it indicates there’re processes at background supervising and protecting. You should first kill the relevant process in process manager, or press F8 after starting, and then delete it under safe mode.
4. Other r