| Kommentare über services.exe: |
 Alex | Windows Service Manager |
 Tanveer | i deleted it repeatedly using security task manager but it keeps coming back. |
| Walle | Windows Service Manger |
| hiarto miarto | if it is in the directory c:\windows\lsass directory it is dangerous |
 | winlogon |
| Martin | Services.exe is not dangerous...service.exe is(trojan) Siehe auch: Link |
 Brian | Should it be blocked by my firewall? Siehe auch: Link |
| Nautis | Should be located in %windir%/system32 (ex. C:\Windows\System32) if not it could be a trojan. If its a trojan and you can't remove check text in file for other potential trojan files. |
| Myke | c:\windows\services.exe was found to be a trojan on my machine. Blocked with zone alarm, but still cant get rid of it. Some other process must be restoring the file at start up. Any ideas anyone? |
| XGS | It is some kind trojan, it takes control of systems, rpc-overflow. Siehe auch: Link |
| John | C:\WINNT\services.exe at 8kB was the backdoor.Zincite.a virus for me. The Windows 2000 services.exe was 83 kB. Some other application (possibly C:\WINNT\jave.exe which was mydoom) kept recreating winnt\services.exe whenever I deleted it. |
| Herb30 | My firewall asks if I want to allow it. If I do not, my AOL will not access the web except for e-mail. |
| | should be in windows/system32 |
| ketamininja | serviceS.exe is OK! service -- with no "s" beware!! |
| 00s£b | the system process services.exe is not dangerous but the services.exe launch with your username is dangerous. Try deleting it with Security Task Manager then delete the directory and the entries in the registry : HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run & HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. |
| Gradius | Ultra dangerous, this file try to access some websites, and keep around 800 bytes everytime to Internet, I keep coming back, it's around 6KB, sites are: http://www.geocities.com/cristina8_white/shit.txt |
| Jose | services.exe is Windows Service Controller it is an Application that is used only in Windows NT 4, 2000, and XP for starting, stopping, and interacting with system services. |
| Henrik | The services.exe was found in the system32\services-directory among a lot of xxx-related stuff - I renamed services.exe (could not erase directly as it was active), rebooted and removed the entire directory. Afterwards I cleaned the registry manually |
| | It's the MyDoom virus if found in c:\Windows |
| Roland | wolud try to connect tcp 200.117.202.27:80 ; send cached keys ? |
| Goldhammer, Norbert | keine verbindung mehr zu microsoft update / geänderte startseite |
| Pieter Rabie | Backdoor.Zincite.A uses this file. The file is also referred to in registry to run at startup. "c:\windows\services.exe". |
| jeff | c:\windows\system32\services.exe is normal, but c:\windows\services.exe is not normal and is a trojan. |
| Jake | If the services.exe is from C:Windows its a trojan. Follow the link for the registry fix and delete both C:Windows/services.exe and C:Windows/System32/mssyncr.exe, that's what I did and it's no longer on my computer and trying to dial out Siehe auch: Link |
| | The SecurityTaskMan says its a 100 rating for a risk. So why is it good? it is Services.exe |
| | Services.exe ist bei mir nicht nur in system 32 sondern auch in windows temper und lässt sich nicht löschen! |
| 123 | trojan dropper (downloaded onto my computer from a porn site to path: C:\windows\system32\goulmn\services.exe) and registry changes. |
| Services & Controller App | Microsoft has issues and spying on Customers is one of them .... why would you need to have services @ controllers to access the net when you have Explorer?.. |
| | Received it from an msn-user, after giving him my IP-adress (stupid!!), as "server.exe". Became Services.exe after starting server.exe. |
 | I had an experience with a trojan that was c:\windows\system32\windows\services.exe! Clever bastards. |
| M colston-weeks | It suddenly appeared ,and makes my computer hang ,if I allow it |
| Thomas | C:\WINDOWS\INETDIM\ Services.exe is a virus?? |
| stavros_d | read this! it was veery usefull to me. i remove it with this. Siehe auch: Link |
| brett | I got 2 services.exe, and I had detected which 1 is the virus(download.trojan), but can't remove it as it is the same name as services.exe, how? |
| Nick | very suspicious, what would it be doing in C:\Windows\System32\MSOffice\services.exe ? I haven't installed office at all, nor would it ever be there... all by it self! |
| | It came up as a trojan on AVG, I deleted the little sod. |
| Cecil | Services.exe is installed on my computer as a part of my XP package |
| stavros_d | trys to connect in two tcp's. its placed in C/windows folder. |
| The_Shaman | I have C:\WINDOWS\system32\MSOffice\services.exe Is this good or bad? Norton detects it on a virus scan, but I can't delete it. Should I be worried? |
| | I had it under C:\WINDOWS\ I deleted it and everything still works! Why keep it, you don't need it! Just delete it! |
| Patrick | I don't know much about this. I made sure the services.exe was where it was supposed to be before deleting it. |
| JORG ARTURO | QUE ES UN VIRUS TROYANO QUE SE ALBERGA DENTRO DEL DIR. SYSTEM32 Y REINICIA LAS PC. UNA VEZ QUE SE EMPIEZA A EJECUTAR Siehe auch: Link |
| Qinglin | The others users who share the router can't use internet!!! |
| Shane | Is present in C:\WINDOWS\system32 (99kb) , C:\WINDOWS\$NtServicePackUninstall$ (106kb) and C:\WINDOWS\ServicePackFiles\i386 (106kb) |
| John Kline | Well if you don't need to run your system go ahead and delete it. I would leave it be though. From what I understand services.exe basically assist is running your processes on your server. In the olden days when we would stop services remotely as a joke it would bluescreen the victims computer. I think ms fixed it so you can no longer stop it. |
| Kevin Gallo | It's safe if it's in the System32 folder. However, I've come across it in this folder before, meaning it's not legit: C:\WINDOWS\SYSTEM\windows\services.exe |
 | Consumes ~80% of resources thereby slowing everything down |
| dread knight | this services.exe file mostly infects NT/win2000/XP,and it doesn't let u to delete dis file, i haven't experienced that file,but experienced a similar file to services.exe.My friend said that this file is both in windows\system32 and windows\temp folder,weird. But if u open that services.exe with a different way (such as notepad.exe or a database program like VB,C++) and remove the entire codes,lines,etc... I mean it shall be an empty file,erase everything within,and save changes,and also prevent this file to run itself during reboot as in registry.Thus u will get rid of that file |
| Kang | May be related to the Coolsearch adware, I've got a services.exe in C:\Windows\System32\MSOffice and another in C:\Windows\System32, the one on MSOffice is created on the same date I detect the adware. |
| cuerx | windows\inetdim\services.exe (i changed the name and rebooted). Then I deleted the inetdim directory and no more issues |
| benny | INETDIM= dangerous!!!!! |
| Trojanhuter | Trojan Siehe auch: Link |
| Gerárd | Ich kann diese Datei nicht löschen (C:\windows\system32\goulmn\services.exe) Trojan Conycspa. Wer weiß wie man den los bekommt? Danke |
| zpy | try the patch... it seems go to work! this worm it's Bugging me!.. |
| Andy | I deleted services.exe then realised that was a mistake and reinstated a copy of it. Cannot execute any setup.exe files. Any help? Cheers |
| Just Infected | Running as an unprivileged user I have no problems with this process, but when I log on as Administrator the services.exe process hogs the CPU (according to MS's Task Manager). The only file Find turns up with this name is in the right directory, so presumably legitimate. I have no idea what is going on; can anyone advise? |
| Binefa Palou | Virus has 2 files: c:\windows\services.exe & c:\windows\system32\fservices.exe (that rebuilt the first one if it's deleted). Virus is a keylogger that sends an e-mail with your keystroken everytime you connect Internet; blocks Windows XP SP2 protect shield and the Windows Xp "system restore service". You must erase the 2 files and then clean the register. |
| Ryan Critchett | Its a file that is part of Windows, any file that you see, with weird names, check in System 32, if you see if there, thats where its supposed to be, if it is not there, and you find it elsewhere, then you have something to worry about. Reguardless, I suggest having NORTON 2002-2005, also norton internet security and you´ll be fine. Scan your computer every three days, and dont be surfing those porn sites as much and you wont have as many Viruses! |
| Stephen | Trojan |
| Karo | after a combined trojan attack, i had a file in system32 that in HJT and Find It! logs lists as "??rvices.exe", and in windows explorer shows as a hidden file named services.exe (same name as the legal, visible file in the same folder). Since in Properties dialog it didn't have any mention of Microsoft, i deleted it in safe mode, with no bad effects. |
| admin | service.exe (not services.exe) is a trojan which in my case runs as a process and resides in memory. Once it has loaded as a process it is deleted from the windows system folder. I have yet to locate it because of this. |
| Tony C | This is an important and valid file. How ever some viruses call it to perform malicious acts. Search your registry in the (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run) you probably have a problem if there is any reference to it there, ie. "Services.EXE"="%windir%\services.exe" |
| Bob | don't know but it was previously NOT being flagged by my firewall (zonealarm) and I had no problems. Once it was recognized by ZA if I deny it access I have NO internet access whatsoever. Path is C:\WINNT\System32. I see alot of conflicting info here but I want it off, any suggestions? I'm a novice... |
| Bob H | When I do a search, it comes up in the System32 folder and the C\:windows\System32\dllcache folder as well. Is the file in the dllcache ok or is it a virus? |
| Jon | My system was sending and receiving without my request. I read these notes, deleted c:\windows\system\services.exe and c:\windows\system32\mssyncr.exe and the connection usage has stopped. |
| | The real deal (for win 2k): C:\WINNT\system32 - AND- C:\WINNT\ServicePackFiles\i386 are essentially the same Windows Operating System services and manages the operation of starting and stopping services like net connection. DO NOT REMOVE THESE FILES. All other "services.exe" are HIGHLY suspect. To COMPLETELY remove them you'll need to find what other files are reinstating them. The free downloadable HiJackThis "sniffer" can usually find the related files. Delete "bad" service.exe. Next powerdown and at startup press F8 (safemode) to remove the associated files. |
| phanz | services.exe got 100% pc usage when i start up and i can not acces anymore takes a lot of tries to be able to do anything internet does not work anymore using WLAN USB to connect makes me mad |
| Jesper | when i run ad-aware and the file is detected it reboots my computer after 45 seconds or so... |
| Zutty | Normally an system process (in windows-folder) |
| Josep Binefa | It has a keylogger and sends an e-mail with your keystroken everytime you connect Internet. It is associed with the file "fservices.exe" in the system32 directory that remakes "service.exe" (in windows" directory) if is deleted" |
| Billy | Services.exe is a virus that will destroy your hard drive and if not removed in time will infect you mobile phone via bluetooth if you have a bluetooth dongle.. |
| nick | my cpu is 100% from this process so what can i do? |
| fdalplr | backdoor.win32.Prorat.19g (as told by Kaspersky) |
| BrowneR | I have it located in C:\windows\services.exe. It runs alongside the microsoft services.exe (C:\windows\system32\servcies.exe) and cannot be closed. Nothing detects it as a virus/adware/trojan etc and when i delete it it apears again after reboot. no refrences to it in the registry. Have found refrences within the file to http//ww.geocities.com/cristina8_white/shit.txt and http//ww.microsoft.com/ along with http//ww.cruelintentionz.net/index.php. Only 11Kb in size. I have no fix yet... |
| BrowneR | If located in c:\windows and is about 10-12kb then delete it and also mssyncr.exe (located in C:\windows\system32) to remove virus. (do it in safe mode) If located in C:\windows\system32 and signed by microsoft leave alone! |
| | 65 kb cant shut it down , located in windows/inet10055 |
| rubixcube | well all i can say is i am running win200 pro and when i start up, zonealarm popups and says 'services and controller app is connecting to the internet' then my cpu goes right up to 100% and stays there, making my computer unusable |
| Win-User | restarts system - delete it..... |
| Melissa | I understand in itself, it's not a bad file BUT it CAN be dangerous. I notice that when I stop all the rundll32.exe processes (because I always have like 10 running) I STOP getting pop-ups. The minute a pop-up window comes to annoy me, I check the programs running in task manager and what do you know! Rundll32.exe is BACK! I did the experiment a few times so there IS a link between that process and stupid pop-ups, the question is, HOW do I go the root of that process and delete what needs to be deleted? |
| Flyervv | is also in a service pack, swallows much CPU during boot |
| Ronen | CPU Utilization in Services.exe Increases to 100 Percent for 3 minutes every time i connect to the web. |
| mf | I suspect this file is using my computer to mail unwanted eml to some targeted port. I had over 120 messages scanned by avg that weren't even in my mailbox. I went to task to see what was using so much rescources and found this services.exe file right up there. I next did a file search and found it in system 32 and in system 32/dllcache. I wasn't sure about which one was legitimate, so I came to this page. there sure are alot of different opinions here. |
| film | I accidently arrowed on it, while trying to arrow on. |
| Jerry | Windows services manager. Don't start deleting things until you are certain that the file is malicious. |
| Losing my mind~ | The application or DLL C:\WINDOWS\system32\umdmx.frm.dll is not a valid windows image. Please check this against your installation diskette. |
| navizero | I found a duplicate of services.exe in the sys32 folder. It said that it had been created earlier in the week. I just renamed the little bugger to an inert file type. It's a good tactic for those annoying ones that won't go away. Good hunting! |
| m0nni | The normal services.exe should be in path windows/system32/services.exe , if it is somewhere else its a troijan horse. to remove it go to path documents and settings\all users\application data\SecTaskMan and delete all files which contain "services". then use for example giants ad-aware to get rid of the file. |
| | services.exe is safe if u want to check it simly search the file right click it show the version if not then scan this file |
| Oleg | File c:\windows\services.exe, size 6013 bytes. Is restores itself somehow during system start-up. Sends keystrokes to http://64.34.66.18 Interferes with internet operations heavily. Absent in the "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" path of the registry. Avast antivirus does no see it. All my hopes are for Dr.Web antivirus now. |
| Danneey | For those who have reported it coming back, have you turned off System Restore before removing? As it's in the Windows folder, System Restore will reinstate the file if it is removed or corrupted. Once cleaned, you can turn System Restore back on. This is the same for any virus/trojan that places itself in a system folder. |
| paul | can be dangerous. the original services.exe is not, but mine was substituted with another one, that took my processor 100%. renaming it was possible but a new services.exe appeared. Restoring my w2k image was best. |
| pieter | This is the Services Control Manager, which is responsible for running, ending, and interacting with system services. |
| | Can be dangerous. If found outside the C:\windows\system32 directory, it's a virus. Otherwise, leave it alone. It's an integral process. |
| wilfred | c:\windows\system32\msmon.exe pop up |
| senthil | This is an important and valid file. How ever some viruses call it to perform malicious acts. Search your registry in the (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run) you probably have a problem if there is any reference to it there, ie. "Services.EXE"="%windir%\services.exe" |
| taichi | Its a normal windows file and it's location is C:\windows\system32. But on my system the process always takes 20% of my cpu usage. |
| Geneva | I have two "services.exe" application. One application is in the "C:\windows\system32" folder, and the other application is in the "C:\windows\ServicePackFiles\i386" folder. |
| Alan M | It is part of Windows therefore...(swear words) I find it necessary to do some intermet access via task manager. I let it access the internet but I don't let it act as a server with out any problems from chat etc. |
| MFais | I repetedly have to block/allow connections while logged as normal user but never when logged as administrator in Windows XP |
| matze | Windows Service Manager, gefährlich wenn ausserhalb von Windows\System32! und genau dort kein Unterverzeichniss! |
| Lore | harmless as far as I know |
| Pip | Not Dangerous... but quite a pain in the rear. Easy steps to stop 'services.exe' maxing Out cpu 100% |
| V8 | the windows file is located at C:\Windows\system32, if that file is somehere else its a trojan or worm ..... |
| J.J. | Found this file running along side zipped.wrm and maddys.xyz. Deleted all of them in safe mode and have not had a problem since. My firewall blocked it from doing any real damage outside of my computer. |
| MLS | My McAfee firewall detected services.exe is trying to get access to internet. It is in my windows\config\system folder. It was created today as was another services.exe (and a lot of letters and numbers) in windows\prefetch\ McAfee Virus Scan did NOT pick it up even after updating. |
| Redshift02gt | This services.exe file keeps coming up about every two hours for me. it references some memory and then gives you the option to click ok. when you do that, it gives you 60 seconds to save any work and it shuts down your pc. so far,its wrecking my plans for building an image for cloning pcs. |
| Keli Ray | it keeps shutting off my internet connection |
| Got hit | If unsure -Just Rename to services.exx. For 100%cpu and repoot on scan - look out for avpx32.exe - is nasty |
| Fons van der Beek | if services.exe is running more than twice, you've got a problem: download hostexplorer from sysinternals, one instance of services is started from explorer.exe, delete this task and search your registry for "services.exe" if services.exe is not originated from \winnt\system32 (or windows\system32) delete this key and the corresponding directory. |
| Dutchy | with most trojans or worms of this type, you have to turn system restore off, then restart in safe mode use the F8 key. then run your anti virus & also spybot, AdAware etc. then reboot & turn system restore back on. |
| | Sometimes it randomly uses up to 30 % of my cpu but it is services.exe and not service.exe |
| Shairel | Follow this procedure Siehe auch: Link |
| | automatically shutdown in 1minute |
| salvino | that it has to connect to the internet or it will mess your internet up, I blocked it on my firewall same with symantec and i can only stay on the internet for 5 sec, help me |
| nagaraj | system shutting down by giving 45second time |
| Tiff | I am concerned that it may be a virus. It's located in the C:\windows\servicepakfiles\i386 any feedback would be appreciated! |
| | I have a trojan BKDR_PRORAT.(A and I). Files infected or files are services.exe, sservice.exe, fservice.exe, reginv.dll, winkey.dll, 5 entries and Trend Micro doesnt remove. All sugestions by Trend ie, deleting processes and registry removal actually don't exist on my system. This is the first trojan I have been unable to remove. Help Rowdy |
| Kevin Myers | Seems to loacated or associated with file INET10079. I got rid of this file using Macafee. The PID of the offending SERVICES.EXE changes on startup indicating that it is not correct. Locate the PID and find it using Services Task Manager and this stops it. However it is difficult to eradicate completely. |
| FrankV | In AVG servises.exe it apeared as BackDoor.Prorat.2.BC. It is also in the system and system32 dir, but then named as sservices.exe and fservises.exe. It tries to spread across the network. No unusual CPU usage. |
| | I have services.exe in my system32 files, and i viewed the applications properties and if you check the version, it says that it is copyrighted by microsoft. so i think it does have some use for some computers. |
| | in 2k it is 90kb and located at c:\windows\system32. with last rollup applied. note: this is foreign language(korean) installation- |
| Need to DELETE | I have it and I cant delete it !!! Does anyone know how and if so please tell me :) |
| HardBoy | its a virus cum trojan cum spyware Siehe auch: Link |
| neewah | System process on Windows 2000 |
| spoOny. | all i know is that people here are getting confised between (services.exe) and (service.exe) i assure you that services is standard windows process.. dont try to delete this one..the problem is with service.exe ..... it is a trojan and can be infected on a list of files including, .jpg, .exe,. .bmp and many others... the thing i did is to click Run... type: msconfig.... click the startup Tab.. end service.exe and reboot... wont delete it but in doing so should hold the trojan from bieng nasty on your system... |
| sandstorm79 | windows-kommunikations-datei für bestimmte programme die sich mit dem internet verbinden... völlig harmlos... löscht man sie, kommt sie automatisch wieder - normal, ist ja auch eine system-datei, einige programme können ohne diese datei keine verbindung zum internet aufnehmen |
| Scott | Found c:\windows\services.exe (343KB; icon=folder w/ red lips) is harmful. Two copies are stored in: c:\windows\system\sservice.exe and c:\windows\system32\fservice.exe. Did not find anywhere else that described this. |
| gigi | run msconfig , deselect services and reboot.....after this u can safe delete the file c:\windows\services.exe |
| Anand Kanojia anandkanojia@msn.com | Guyz if havn't got the solution then you must use Miscrosoft Antispyware Tool. Siehe auch: Link |
| FEWO | uses up you CPU resources up to 98% whenever you dial-up to the internet |
| Joe | you need it (the genuine windows file) to access internet in windows |
| Sean | system shutting down by giving 60 second time |
| mohammed younus ahmed | it makes my computer slower |
| IH8 viri | I have services.exe on my comp. and it was in the C:\windows\system\DRIVER dir. it was a system and hidden folder so i had to change that through DOS. Actually all executable files in that dir. were found to be viruses by norton. |
| sr22ger | This process if located outside C:\windows(or winnt)\system 32 is a malicious executable, possibly a variant of the sober worm. |
| | services.exe c:\windows\services |
| Ryan | Using aim my friend sent me a link and a text that said "my new pix!' turns out it was a mass spread Services.exe and sent the same IM to all the people on my buddy list, it continuously spread that way, but yah same as above, i cant get rid of it! |
| tressor | services.exe in system32 folder takes 98% of my CPU, it freezes my system (2k). What's going on?? |
| Erinaceus | If it runs in C:\Windows\System32\ good if not bad Siehe auch: Link Link |
| BengalTigger | It can be either. It is a legitimate windows service, but there is also a Trojan disguising itself as this service. In RegEdit, I found ??rvices.exe labelled as services.exe but when I displayed binary, it was actually U5rvices.exe |
| Nightmares-Tonight | Schaut auf der Seite nach, sehr gute Infos! Siehe auch: Link |
| Carbon | Tiff, I also have this file in that location (C:\windows\servicepakfiles\i386) I don't think you need to worry about it. |
| Miguel | Causes windows malfunction , windows not responding, system shut down. |
| Jerry | Opens up other process, very well a part of SpySheriff, an malicious piece of extremely aggresive spyware.(Active content download) |
| Alex Ti | c:\windows\system32\services\srrvice.exe -Trojan!!! |
| DnherO | It copies itself into C:\WINDOWS\WinSecurity with the name services.exe, damn it, when ever I run an anti virus or antispyware, it give an annoucement: "No virus found" immediately; and kill the antivirus or antispy process. I deleted its key in the registry, it restored right after I close the Startup-manager. |
| John Serink | It lives in c:\windows\services.exe. It is running 2 ftp servers on my machine, one on port 5112 and port 51100...and another server at 5110 that spits out Sifre_EDITSifre_Hatasi when I connect to it with a socket client. |
| Tyrese | i have services.exe(379KB) in C:\WINDOWS\system32\service\services.exe, and i think this is a worm, but i can remove it... you know something about this process in this directory? thanks |
| | in start menu run/ run msconfig utility / startup . stop unwanted files |
| Samantha | services.exe (that's plural folks..with an S on the end) is a genuine windows file. Completely safe if it's found in c:\windows\system32. As long as it is found in c:\windows\system32, it is normal and safe to be found in multiple directories also, as long as it is found in windows\system32 as well as any other directory, it is still completely SAFE. Otherwise, only if it is service.exe (that's singular, without the S folks), is it a trojan/worm/virus |
| Luis | You just cant do nothing because the services use 100% of my cpu!!!! |
| Romeo5k | located c:\windows\services.exe Will not delete. But wen i change the name it comes back. When i restart computer i get errors. Uses computer usage BEWARE... CAN BE USEFULL AND DEADLY TO UR COMPUTER |
| trustworthy | AVG reported C:\WINDOWS\system32\dllcache\win32\services.exe as Trojan Horse BackDoor.Iroffer.2.BJ |
| Obereule | It Slows down PC and shuts down Outlook |
| Rob | This program isn't needed unless you are using a tablet PC or other input device that can use it. It spawns insidiously and sucks up a ton of GDI objects crippling the way I work. Here is the link I found to remove it. Siehe auch: Link |
| MAC | Thanks to 00s%b. Your info was great. Removing HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. is the way to go. |
| Et Al | I only have the file that came with my OS. BTW - "msconfig" works for XP. Other Windows OS (i.e., 2000) must use a different method. AND ... like "spoOny" said; there IS a difference between the needed system file "SERVICES.EXE" and the viruses. The system file has a very specific place it should be located. The viruses will be found in places other than that. |
| anonymous | eats up CPU to 100% after 25 minutes of dial-up internet |
| Sam | Can Cause 100% CPU Siehe auch: Link |
| Stian | Slows down your pc and internet connection. Norman Virus Control (NVC) found infected with W32/DLoader.CLZ. This file was located in the windows directory (c:\windows\services.exe). Norman Virus Control cleaned/removed it for me. Still got services.exe located at c:\windows\system32, but this one must NOT be removed, cause this file is a important part of windows. |
| LUDY | It downloaded Ad-ware every time I accessed the Internet, I found it with Windows search and deleted it using cut & paste to the recycle bin, life is good! |
| NightKiller | it makes my computer much slower.. |
| peter | services.exe klatscht cpu voll... bei neustart 100% auslastung... |
| | cpu usage says its 100% full, multiple processes of the same service running on the task manager |
| RSNG | it comes with windows xp home edition, i did format mi harddisk... and install just windows... its always there... windows shit! |
| MaldOne | I have win2000 and the file services.exe in system32 folder is a windows file but it takes all my cpu freezing the system, what is going on? |
| Milo Ice | It's nothing. I am resintalling my OS and everything is OK |
| GsHustle.com | I had to files in my system32 folder, both named services. When hovered over it showed that it was a Microsoft process. |
| | Norton Anti-virus deleted the malignant file, but left the registry keys intact - thus - Windows xp pro will start and give an error message for services.exe and isass.exe and hang - have to do a repair installation from the windows xp disk - Unfortunately Windows XP Pro came pre-installed - |
| Joe | I accidental deleted the real services.exe and now can't log on. I know, n00bish but how do i fix this? |
| Anis Jamadar | It is just a small variant of sd32.jghod.pune .. not dangerous at all |
| Marko | Needs to be in your \System32\ folder (if it's a legitimate version of the Services and Controller app) and is required to access the internet-- otherwise you can't get online. |
| Gr00vytunes | Service.exe on my servers is an adaptec storage manager pro process its |
| David | Unfortunetly, I was plagued by this annoying virus, too. I used Security Task Manager and tried getting rid of services.exe and fservices.exe (because they both had a little worm eating a paper icon next to them) I was bored so I just kept quarantining them and deleting them in the quarantine menu and finally they stopped showing up. Weird. |
| ian | just download the SecurityTaskManager and quarantin services.exe to remove it |
| Andrew | Be very careful in removing this file from system32. Doing so may cause your computer to not start properly. By that, I mean you won't have a desktop or start menu or anything else. The computer slows to almost a standstill. If you've done this, you can repair by hitting Ctrl-Alt-Delete, going to the task manager, clicking File- Run, opening the cmd window, and restoring the file from another location where you previously backed it up. |
| K.B. | services.exe and mstask.exe has been patched! replace them with the original ones from the Windows Install CD. You go'n see also the difference if you compare the with a HEX edit :) |
| ian | omg its killing me, it suddenly appear on task manager and makes my net go slow and my comp go slow to and worst hang =/, STM says its on C:\Windows but i cant see it there instead its on C:\windows\system32, anyone can help me? |
| Frank | service.exe make my computer automatically restart if i run msconfig or regedit |
| Adam | On my Compaq, it is a safe file used to pull up those unwanted pre-installed Compaq servicing pages. Very annoying thing that Compaq has pre-installed, but it's a safe file otherwise.. |
| James | You need to be sure that you are running the REAL services.exe instead of the afflicted one. Check your windows directory for "services.exe", and your windows directory / system 32 folder and compare the two. If you have the one in the windows folder, you definitely have the trojan. However, if you are running the services.exe in the System32 folder, which you can tell by "Date Accessed" entry in the Properties window, then you are safe. It is a part of normal windows operation, but you need to be very sure. |
| mottalib | everytime i try to search this file (and other *ss.exe files) even on the internet, the computer restarts! |
| The Dude | Takes up 365MB of RAM (windowsXP sp1) |
| KillTheNightKiller | I have 2 "services.exe" running in my task manager, one under SYSTEM, and one under the USER account.. I've scanned with almost anything, no luck.. Can't find it in regedit or the windows folder.. Did a search on my computer, still no luck.. It only found the originally services.exe.. What now, what comes next? |
| | It happens to me when I try to load any installation package...Do you have AVi anti-virus or Zone Alram? |
| Edward | Es un virus de categoria 4, que afecta el sistema operativo. A la vez se camufla, dando la apariencia de un archivo necesario de windows y hasta el momento no hay antivirus |
| BesT | Running a good antivirus with Buffer Overflow protection allows your pc to run normally but most times it reapers with logon. Reinstalling the OS is a good idea but not for all.I`ll try to resolve this. Check the link provided. Siehe auch: Link |
| | Very dangerous when deleted from windows/system32. If you lack the knowledge that you shouldn't delete it, it is extremely likely that you lack the knowledge to ever get your computer to start again after you have. |
| | it's a windows file.. however, torjan disguises it self as Services.exe |
| | Net Gear USB wireless adapter caused services mine to spike to spike between 0-10 then as the computer ran 0-100. It took me months to figure out what it was! Delete the netgear software and see if this is it! Services can look like other tasks is the problem, as it is handling these other tasks. Use Win Tasks to systematically nuke each process and see what they are doing |
| Neal (logic pc person) | This is a critical system file that windows uses to execute certain files and network devices, there are known sources that replicate themselves as this process and can turn out be dangerous and malicious if found anywhere else than &systemroot%\&system&\services.exe delete it immediatly, dont end this process as it will cause a RPC remote protocal call and will shut down your computer |
| DigitalApocalypse | This is a vital Windows component and cannot be stopped, WinPatrol says. |
| LARDY | the file i had in the system 32 folder disappeared and i get 4 error messages everytime i log on to my account it tells me to remove it from the registry so i am |
| westy | I just got infected with this an hour ago, after discovering it running under my services rather than system in the task manager i realised it was a trojan and using ad-aware SE pro process watch i disabled it and the other 2 processes running with it from the same directory (c:\windows\system32\foahktgm\services.exe) could then open msconfig and disable it, and then restarted, on restart it did load however it had deleted the config files for my avg firewall, i then used process watch to trace and delete the files manually, repaired the install on avg and now the system seems to be ok |
| hamid | efficiency ways against services.exe is symantec softwares & use of antispyware |
| Saisin-Tae | No detected viruses (NOD32), no spyware (Adaware), no other services.exe(deleted all of'em) and still got 60% of Dual Core 3.0 Ghz CPU occupied... Any idea what's going on? I do not remember Windows XP having larger CPU usage than all my other programs alltogether.... |
| Henry | It's an important part of Windows. I have Windows XP and installed a Bluetooth USB Adapter. After that my CPU usage was pegged permanently at 100%. Once I disabled the Bluetooth device and terminated its two process from Task Manager, services.exe stopped using all my CPU. So now I only turn on my USB adapter when I need it instead of having it on all the time. |
| Sheridan | If services.exe file is located in Windows\system32 directory it's good. If not, it's virus. |
|
|
