| Kommentare über services.exe: |
 Alex |  Windows Service Manager |
| Walle | Windows Service Manger |
 | winlogon |
 John | C:\WINNT\services.exe at 8kB was the backdoor.Zincite.a virus for me. The Windows 2000 services.exe was 83 kB. Some other application (possibly C:\WINNT\jave.exe which was mydoom) kept recreating winnt\services.exe whenever I deleted it. |
| | should be in windows/system32 |
| 00s£b | the system process services.exe is not dangerous but the services.exe launch with your username is dangerous. Try deleting it with Security Task Manager then delete the directory and the entries in the registry : HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run & HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
| Gradius | Ultra dangerous, this file try to access some websites, and keep around 800 bytes everytime to Internet, I keep coming back, it's around 6KB, sites are: http://www.geocities.com/cristina8_white/shit.txt |
 Henrik | The services.exe was found in the system32\services-directory among a lot of xxx-related stuff - I renamed services.exe (could not erase directly as it was active), rebooted and removed the entire directory. Afterwards I cleaned the registry manually |
| Goldhammer, Norbert | keine verbindung mehr zu microsoft update / geänderte startseite |
| Jake | If the services.exe is from C:Windows its a trojan. Follow the link for the registry fix and delete both C:Windows/services.exe and C:Windows/System32/mssyncr.exe, that's what I did and it's no longer on my computer and trying to dial out Siehe auch: Link |
| | Services.exe ist bei mir nicht nur in system 32 sondern auch in windows temper und lässt sich nicht löschen! |
| John Kline | Well if you don't need to run your system go ahead and delete it. I would leave it be though. From what I understand services.exe basically assist is running your processes on your server. In the olden days when we would stop services remotely as a joke it would bluescreen the victims computer. I think ms fixed it so you can no longer stop it. |
 dread knight | this services.exe file mostly infects NT/win2000/XP,and it doesn't let u to delete dis file, i haven't experienced that file,but experienced a similar file to services.exe.My friend said that this file is both in windows\system32 and windows\temp folder,weird. But if u open that services.exe with a different way (such as notepad.exe or a database program like VB,C++) and remove the entire codes,lines,etc... I mean it shall be an empty file,erase everything within,and save changes,and also prevent this file to run itself during reboot as in registry.Thus u will get rid of that file |
| Kang | May be related to the Coolsearch adware, I've got a services.exe in C:\Windows\System32\MSOffice and another in C:\Windows\System32, the one on MSOffice is created on the same date I detect the adware. |
| benny | INETDIM= dangerous!!!!! |
| Trojanhuter | Trojan Siehe auch: Link |
| Gerárd | Ich kann diese Datei nicht löschen (C:\windows\system32\goulmn\services.exe) Trojan Conycspa. Wer weiß wie man den los bekommt? Danke |
| Just Infected | Running as an unprivileged user I have no problems with this process, but when I log on as Administrator the services.exe process hogs the CPU (according to MS's Task Manager). The only file Find turns up with this name is in the right directory, so presumably legitimate. I have no idea what is going on; can anyone advise? |
| Binefa Palou | Virus has 2 files: c:\windows\services.exe & c:\windows\system32\fservices.exe (that rebuilt the first one if it's deleted). Virus is a keylogger that sends an e-mail with your keystroken everytime you connect Internet; blocks Windows XP SP2 protect shield and the Windows Xp "system restore service". You must erase the 2 files and then clean the register. |
| Ryan Critchett | Its a file that is part of Windows, any file that you see, with weird names, check in System 32, if you see if there, thats where its supposed to be, if it is not there, and you find it elsewhere, then you have something to worry about. Reguardless, I suggest having NORTON 2002-2005, also norton internet security and you´ll be fine. Scan your computer every three days, and dont be surfing those porn sites as much and you wont have as many Viruses! |
| Stephen | Trojan |
| Karo | after a combined trojan attack, i had a file in system32 that in HJT and Find It! logs lists as "??rvices.exe", and in windows explorer shows as a hidden file named services.exe (same name as the legal, visible file in the same folder). Since in Properties dialog it didn't have any mention of Microsoft, i deleted it in safe mode, with no bad effects. |
| admin | service.exe (not services.exe) is a trojan which in my case runs as a process and resides in memory. Once it has loaded as a process it is deleted from the windows system folder. I have yet to locate it because of this. |
| Tony C | This is an important and valid file. How ever some viruses call it to perform malicious acts. Search your registry in the (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run) you probably have a problem if there is any reference to it there, ie. "Services.EXE"="%windir%\services.exe" |
| Bob | don't know but it was previously NOT being flagged by my firewall (zonealarm) and I had no problems. Once it was recognized by ZA if I deny it access I have NO internet access whatsoever. Path is C:\WINNT\System32. I see alot of conflicting info here but I want it off, any suggestions? I'm a novice... |
| | The real deal (for win 2k): C:\WINNT\system32 - AND- C:\WINNT\ServicePackFiles\i386 are essentially the same Windows Operating System services and manages the operation of starting and stopping services like net connection. DO NOT REMOVE THESE FILES. All other "services.exe" are HIGHLY suspect. To COMPLETELY remove them you'll need to find what other files are reinstating them. The free downloadable HiJackThis "sniffer" can usually find the related files. Delete "bad" service.exe. Next powerdown and at startup press F8 (safemode) to remove the associated files. |
| Josep Binefa | It has a keylogger and sends an e-mail with your keystroken everytime you connect Internet. It is associed with the file "fservices.exe" in the system32 directory that remakes "service.exe" (in windows" directory) if is deleted" |
| BrowneR | I have it located in C:\windows\services.exe. It runs alongside the microsoft services.exe (C:\windows\system32\servcies.exe) and cannot be closed. Nothing detects it as a virus/adware/trojan etc and when i delete it it apears again after reboot. no refrences to it in the registry. Have found refrences within the file to http//ww.geocities.com/cristina8_white/shit.txt and http//ww.microsoft.com/ along with http//ww.cruelintentionz.net/index.php. Only 11Kb in size. I have no fix yet... |
| BrowneR | If located in c:\windows and is about 10-12kb then delete it and also mssyncr.exe (located in C:\windows\system32) to remove virus. (do it in safe mode) If located in C:\windows\system32 and signed by microsoft leave alone! |
| rubixcube | well all i can say is i am running win200 pro and when i start up, zonealarm popups and says 'services and controller app is connecting to the internet' then my cpu goes right up to 100% and stays there, making my computer unusable |
| Melissa | I understand in itself, it's not a bad file BUT it CAN be dangerous. I notice that when I stop all the rundll32.exe processes (because I always have like 10 running) I STOP getting pop-ups. The minute a pop-up window comes to annoy me, I check the programs running in task manager and what do you know! Rundll32.exe is BACK! I did the experiment a few times so there IS a link between that process and stupid pop-ups, the question is, HOW do I go the root of that process and delete what needs to be deleted? |
| wilfred | c:\windows\system32\msmon.exe pop up |
| matze | Windows Service Manager, gefährlich wenn ausserhalb von Windows\System32! und genau dort kein Unterverzeichniss! |
| | automatically shutdown in 1minute |
| neewah | System process on Windows 2000 |
| sandstorm79 | windows-kommunikations-datei für bestimmte programme die sich mit dem internet verbinden... völlig harmlos... löscht man sie, kommt sie automatisch wieder - normal, ist ja auch eine system-datei, einige programme können ohne diese datei keine verbindung zum internet aufnehmen |
| | services.exe c:\windows\services |
| Nightmares-Tonight | Schaut auf der Seite nach, sehr gute Infos! Siehe auch: Link |
| peter | services.exe klatscht cpu voll... bei neustart 100% auslastung... |
| ~SiLvErDrAgOn~ | Ich habe die datei selber, bekomme sie auch nicht weg. es ist von dem prorat trojaner. hoffe das hilft |
|
|
