| All comments about services.exe: |
 | Windows Service Manager Alex |
 | i deleted it repeatedly using security task manager but it keeps coming back. Tanveer |
| Windows Service Manger Walle |
| if it is in the directory c:\windows\lsass directory it is dangerous hiarto miarto |
 | winlogon |
| Services.exe is not dangerous...service.exe is(trojan) See also: Link Martin |
 | Should it be blocked by my firewall? See also: Link Brian |
| Should be located in %windir%/system32 (ex. C:\Windows\System32) if not it could be a trojan. If its a trojan and you can't remove check text in file for other potential trojan files. Nautis |
| c:\windows\services.exe was found to be a trojan on my machine. Blocked with zone alarm, but still cant get rid of it. Some other process must be restoring the file at start up. Any ideas anyone? Myke |
| It is some kind trojan, it takes control of systems, rpc-overflow. See also: Link XGS |
| C:\WINNT\services.exe at 8kB was the backdoor.Zincite.a virus for me. The Windows 2000 services.exe was 83 kB. Some other application (possibly C:\WINNT\jave.exe which was mydoom) kept recreating winnt\services.exe whenever I deleted it. John |
| My firewall asks if I want to allow it. If I do not, my AOL will not access the web except for e-mail. Herb30 |
| should be in windows/system32 |
| serviceS.exe is OK! service -- with no "s" beware!! ketamininja |
| the system process services.exe is not dangerous but the services.exe launch with your username is dangerous. Try deleting it with Security Task Manager then delete the directory and the entries in the registry : HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run & HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. 00s£b |
| Ultra dangerous, this file try to access some websites, and keep around 800 bytes everytime to Internet, I keep coming back, it's around 6KB, sites are: http://www.geocities.com/cristina8_white/shit.txt Gradius |
| services.exe is Windows Service Controller it is an Application that is used only in Windows NT 4, 2000, and XP for starting, stopping, and interacting with system services. Jose |
| The services.exe was found in the system32\services-directory among a lot of xxx-related stuff - I renamed services.exe (could not erase directly as it was active), rebooted and removed the entire directory. Afterwards I cleaned the registry manually Henrik |
| It's the MyDoom virus if found in c:\Windows |
| wolud try to connect tcp 200.117.202.27:80 ; send cached keys ? Roland |
| Backdoor.Zincite.A uses this file. The file is also referred to in registry to run at startup. "c:\windows\services.exe". Pieter Rabie |
| c:\windows\system32\services.exe is normal, but c:\windows\services.exe is not normal and is a trojan. jeff |
| If the services.exe is from C:Windows its a trojan. Follow the link for the registry fix and delete both C:Windows/services.exe and C:Windows/System32/mssyncr.exe, that's what I did and it's no longer on my computer and trying to dial out See also: Link Jake |
| trojan dropper (downloaded onto my computer from a porn site to path: C:\windows\system32\goulmn\services.exe) and registry changes. 123 |
| Microsoft has issues and spying on Customers is one of them .... why would you need to have services @ controllers to access the net when you have Explorer?.. Services & Controller App |
| Received it from an msn-user, after giving him my IP-adress (stupid!!), as "server.exe". Became Services.exe after starting server.exe. |
 | I had an experience with a trojan that was c:\windows\system32\windows\services.exe! Clever bastards. |
| It suddenly appeared ,and makes my computer hang ,if I allow it M colston-weeks |
| C:\WINDOWS\INETDIM\ Services.exe is a virus?? Thomas |
| read this! it was veery usefull to me. i remove it with this. See also: Link stavros_d |
| I got 2 services.exe, and I had detected which 1 is the virus(download.trojan), but can't remove it as it is the same name as services.exe, how? brett |
| very suspicious, what would it be doing in C:\Windows\System32\MSOffice\services.exe ? I haven't installed office at all, nor would it ever be there... all by it self! Nick |
| It came up as a trojan on AVG, I deleted the little sod. |
| Services.exe is installed on my computer as a part of my XP package Cecil |
| trys to connect in two tcp's. its placed in C/windows folder. stavros_d |
| I have C:\WINDOWS\system32\MSOffice\services.exe Is this good or bad? Norton detects it on a virus scan, but I can't delete it. Should I be worried? The_Shaman |
| I had it under C:\WINDOWS\ I deleted it and everything still works! Why keep it, you don't need it! Just delete it! |
| The others users who share the router can't use internet!!! Qinglin |
| Is present in C:\WINDOWS\system32 (99kb) , C:\WINDOWS\$NtServicePackUninstall$ (106kb) and C:\WINDOWS\ServicePackFiles\i386 (106kb) Shane |
| Well if you don't need to run your system go ahead and delete it. I would leave it be though. From what I understand services.exe basically assist is running your processes on your server. In the olden days when we would stop services remotely as a joke it would bluescreen the victims computer. I think ms fixed it so you can no longer stop it. John Kline |
| It's safe if it's in the System32 folder. However, I've come across it in this folder before, meaning it's not legit: C:\WINDOWS\SYSTEM\windows\services.exe Kevin Gallo |
 | Consumes ~80% of resources thereby slowing everything down |
| this services.exe file mostly infects NT/win2000/XP,and it doesn't let u to delete dis file, i haven't experienced that file,but experienced a similar file to services.exe.My friend said that this file is both in windows\system32 and windows\temp folder,weird. But if u open that services.exe with a different way (such as notepad.exe or a database program like VB,C++) and remove the entire codes,lines,etc... I mean it shall be an empty file,erase everything within,and save changes,and also prevent this file to run itself during reboot as in registry.Thus u will get rid of that file dread knight |
| May be related to the Coolsearch adware, I've got a services.exe in C:\Windows\System32\MSOffice and another in C:\Windows\System32, the one on MSOffice is created on the same date I detect the adware. Kang |
| windows\inetdim\services.exe (i changed the name and rebooted). Then I deleted the inetdim directory and no more issues cuerx |
| INETDIM= dangerous!!!!! benny |
| Trojan Trojanhuter |
| try the patch... it seems go to work! this worm it's Bugging me!.. zpy |
| I deleted services.exe then realised that was a mistake and reinstated a copy of it. Cannot execute any setup.exe files. Any help? Cheers Andy |
| Running as an unprivileged user I have no problems with this process, but when I log on as Administrator the services.exe process hogs the CPU (according to MS's Task Manager). The only file Find turns up with this name is in the right directory, so presumably legitimate. I have no idea what is going on; can anyone advise? Just Infected |
| Virus has 2 files: c:\windows\services.exe & c:\windows\system32\fservices.exe (that rebuilt the first one if it's deleted). Virus is a keylogger that sends an e-mail with your keystroken everytime you connect Internet; blocks Windows XP SP2 protect shield and the Windows Xp "system restore service". You must erase the 2 files and then clean the register. Binefa Palou |
| Its a file that is part of Windows, any file that you see, with weird names, check in System 32, if you see if there, thats where its supposed to be, if it is not there, and you find it elsewhere, then you have something to worry about. Reguardless, I suggest having NORTON 2002-2005, also norton internet security and you´ll be fine. Scan your computer every three days, and dont be surfing those porn sites as much and you wont have as many Viruses! Ryan Critchett |
| Trojan Stephen |
| after a combined trojan attack, i had a file in system32 that in HJT and Find It! logs lists as "??rvices.exe", and in windows explorer shows as a hidden file named services.exe (same name as the legal, visible file in the same folder). Since in Properties dialog it didn't have any mention of Microsoft, i deleted it in safe mode, with no bad effects. Karo |
| service.exe (not services.exe) is a trojan which in my case runs as a process and resides in memory. Once it has loaded as a process it is deleted from the windows system folder. I have yet to locate it because of this. admin |
| This is an important and valid file. How ever some viruses call it to perform malicious acts. Search your registry in the (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run) you probably have a problem if there is any reference to it there, ie. "Services.EXE"="%windir%\services.exe" Tony C |
| don't know but it was previously NOT being flagged by my firewall (zonealarm) and I had no problems. Once it was recognized by ZA if I deny it access I have NO internet access whatsoever. Path is C:\WINNT\System32. I see alot of conflicting info here but I want it off, any suggestions? I'm a novice... Bob |
| When I do a search, it comes up in the System32 folder and the C\:windows\System32\dllcache folder as well. Is the file in the dllcache ok or is it a virus? Bob H |
| My system was sending and receiving without my request. I read these notes, deleted c:\windows\system\services.exe and c:\windows\system32\mssyncr.exe and the connection usage has stopped. Jon |
| The real deal (for win 2k): C:\WINNT\system32 - AND- C:\WINNT\ServicePackFiles\i386 are essentially the same Windows Operating System services and manages the operation of starting and stopping services like net connection. DO NOT REMOVE THESE FILES. All other "services.exe" are HIGHLY suspect. To COMPLETELY remove them you'll need to find what other files are reinstating them. The free downloadable HiJackThis "sniffer" can usually find the related files. Delete "bad" service.exe. Next powerdown and at startup press F8 (safemode) to remove the associated files. |
| services.exe got 100% pc usage when i start up and i can not acces anymore takes a lot of tries to be able to do anything internet does not work anymore using WLAN USB to connect makes me mad phanz |
| when i run ad-aware and the file is detected it reboots my computer after 45 seconds or so... Jesper |
| Normally an system process (in windows-folder) Zutty |
| It has a keylogger and sends an e-mail with your keystroken everytime you connect Internet. It is associed with the file "fservices.exe" in the system32 directory that remakes "service.exe" (in windows" directory) if is deleted" Josep Binefa |
| Services.exe is a virus that will destroy your hard drive and if not removed in time will infect you mobile phone via bluetooth if you have a bluetooth dongle.. Billy |
| my cpu is 100% from this process so what can i do? nick |
| backdoor.win32.Prorat.19g (as told by Kaspersky) fdalplr |
| I have it located in C:\windows\services.exe. It runs alongside the microsoft services.exe (C:\windows\system32\servcies.exe) and cannot be closed. Nothing detects it as a virus/adware/trojan etc and when i delete it it apears again after reboot. no refrences to it in the registry. Have found refrences within the file to www.geocities.com/cristina8_white/shit.txt and www.microsoft.com/ along with www.cruelintentionz.net/index.php. Only 11Kb in size. I have no fix yet... BrowneR |
| If located in c:\windows and is about 10-12kb then delete it and also mssyncr.exe (located in C:\windows\system32) to remove virus. (do it in safe mode) If located in C:\windows\system32 and signed by microsoft leave alone! BrowneR |
| 65 kb cant shut it down , located in windows/inet10055 |
| well all i can say is i am running win200 pro and when i start up, zonealarm popups and says 'services and controller app is connecting to the internet' then my cpu goes right up to 100% and stays there, making my computer unusable rubixcube |
| restarts system - delete it..... Win-User |
| I understand in itself, it's not a bad file BUT it CAN be dangerous. I notice that when I stop all the rundll32.exe processes (because I always have like 10 running) I STOP getting pop-ups. The minute a pop-up window comes to annoy me, I check the programs running in task manager and what do you know! Rundll32.exe is BACK! I did the experiment a few times so there IS a link between that process and stupid pop-ups, the question is, HOW do I go the root of that process and delete what needs to be deleted? Melissa |
| is also in a service pack, swallows much CPU during boot Flyervv |
| CPU Utilization in Services.exe Increases to 100 Percent for 3 minutes every time i connect to the web. Ronen |
| I suspect this file is using my computer to mail unwanted eml to some targeted port. I had over 120 messages scanned by avg that weren't even in my mailbox. I went to task to see what was using so much rescources and found this services.exe file right up there. I next did a file search and found it in system 32 and in system 32/dllcache. I wasn't sure about which one was legitimate, so I came to this page. there sure are alot of different opinions here. mf |
| I accidently arrowed on it, while trying to arrow on. film |
| Windows services manager. Don't start deleting things until you are certain that the file is malicious. Jerry |
| The application or DLL C:\WINDOWS\system32\umdmx.frm.dll is not a valid windows image. Please check this against your installation diskette. Losing my mind~ |
| I found a duplicate of services.exe in the sys32 folder. It said that it had been created earlier in the week. I just renamed the little bugger to an inert file type. It's a good tactic for those annoying ones that won't go away. Good hunting! navizero |
| The normal services.exe should be in path windows/system32/services.exe , if it is somewhere else its a troijan horse. to remove it go to path documents and settings\all users\application data\SecTaskMan and delete all files which contain "services". then use for example giants ad-aware to get rid of the file. m0nni |
| services.exe is safe if u want to check it simly search the file right click it show the version if not then scan this file |
| File c:\windows\services.exe, size 6013 bytes. Is restores itself somehow during system start-up. Sends keystrokes to http://64.34.66.18 Interferes with internet operations heavily. Absent in the "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" path of the registry. Avast antivirus does no see it. All my hopes are for Dr.Web antivirus now. Oleg |
| For those who have reported it coming back, have you turned off System Restore before removing? As it's in the Windows folder, System Restore will reinstate the file if it is removed or corrupted. Once cleaned, you can turn System Restore back on. This is the same for any virus/trojan that places itself in a system folder. Danneey |
| can be dangerous. the original services.exe is not, but mine was substituted with another one, that took my processor 100%. renaming it was possible but a new services.exe appeared. Restoring my w2k image was best. paul |
| This is the Services Control Manager, which is responsible for running, ending, and interacting with system services. pieter |
| Can be dangerous. If found outside the C:\windows\system32 directory, it's a virus. Otherwise, leave it alone. It's an integral process. |
| c:\windows\system32\msmon.exe pop up wilfred |
| This is an important and valid file. How ever some viruses call it to perform malicious acts. Search your registry in the (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run) you probably have a problem if there is any reference to it there, ie. "Services.EXE"="%windir%\services.exe" senthil |
| Its a normal windows file and it's location is C:\windows\system32. But on my system the process always takes 20% of my cpu usage. taichi |
| I have two "services.exe" application. One application is in the "C:\windows\system32" folder, and the other application is in the "C:\windows\ServicePackFiles\i386" folder. Geneva |
| It is part of Windows therefore...(swear words) I find it necessary to do some intermet access via task manager. I let it access the internet but I don't let it act as a server with out any problems from chat etc. Alan M |
| I repetedly have to block/allow connections while logged as normal user but never when logged as administrator in Windows XP MFais |
| harmless as far as I know Lore |
| Not Dangerous... but quite a pain in the rear. Easy steps to stop 'services.exe' maxing Out cpu 100% Pip |
| the windows file is located at C:\Windows\system32, if that file is somehere else its a trojan or worm ..... V8 |
| Found this file running along side zipped.wrm and maddys.xyz. Deleted all of them in safe mode and have not had a problem since. My firewall blocked it from doing any real damage outside of my computer. J.J. |
| My McAfee firewall detected services.exe is trying to get access to internet. It is in my windows\config\system folder. It was created today as was another services.exe (and a lot of letters and numbers) in windows\prefetch\ McAfee Virus Scan did NOT pick it up even after updating. MLS |
| This services.exe file keeps coming up about every two hours for me. it references some memory and then gives you the option to click ok. when you do that, it gives you 60 seconds to save any work and it shuts down your pc. so far,its wrecking my plans for building an image for cloning pcs. Redshift02gt |
| it keeps shutting off my internet connection Keli Ray |
| If unsure -Just Rename to services.exx. For 100%cpu and repoot on scan - look out for avpx32.exe - is nasty Got hit |
| if services.exe is running more than twice, you've got a problem: download hostexplorer from sysinternals, one instance of services is started from explorer.exe, delete this task and search your registry for "services.exe" if services.exe is not originated from \winnt\system32 (or windows\system32) delete this key and the corresponding directory. Fons van der Beek |
| with most trojans or worms of this type, you have to turn system restore off, then restart in safe mode use the F8 key. then run your anti virus & also spybot, AdAware etc. then reboot & turn system restore back on. Dutchy |
| Sometimes it randomly uses up to 30 % of my cpu but it is services.exe and not service.exe |
| Follow this procedure See also: Link Shairel |
| automatically shutdown in 1minute |
| that it has to connect to the internet or it will mess your internet up, I blocked it on my firewall same with symantec and i can only stay on the internet for 5 sec, help me salvino |
| system shutting down by giving 45second time nagaraj |
| I am concerned that it may be a virus. It's located in the C:\windows\servicepakfiles\i386 any feedback would be appreciated! Tiff |
| I have a trojan BKDR_PRORAT.(A and I). Files infected or files are services.exe, sservice.exe, fservice.exe, reginv.dll, winkey.dll, 5 entries and Trend Micro doesnt remove. All sugestions by Trend ie, deleting processes and registry removal actually don't exist on my system. This is the first trojan I have been unable to remove. Help Rowdy |
| Seems to loacated or associated with file INET10079. I got rid of this file using Macafee. The PID of the offending SERVICES.EXE changes on startup indicating that it is not correct. Locate the PID and find it using Services Task Manager and this stops it. However it is difficult to eradicate completely. Kevin Myers |
| In AVG servises.exe it apeared as BackDoor.Prorat.2.BC. It is also in the system and system32 dir, but then named as sservices.exe and fservises.exe. It tries to spread across the network. No unusual CPU usage. FrankV |
| I have services.exe in my system32 files, and i viewed the applications properties and if you check the version, it says that it is copyrighted by microsoft. so i think it does have some use for some computers. |
| in 2k it is 90kb and located at c:\windows\system32. with last rollup applied. note: this is foreign language(korean) installation- |
| I have it and I cant delete it !!! Does anyone know how and if so please tell me :) Need to DELETE |
| its a virus cum trojan cum spyware See also: Link HardBoy |
| System process on Windows 2000 neewah |
| all i know is that people here are getting confised between (services.exe) and (service.exe) i assure you that services is standard windows process.. dont try to delete this one..the problem is with service.exe ..... it is a trojan and can be infected on a list of files including, .jpg, .exe,. .bmp and many others... the thing i did is to click Run... type: msconfig.... click the startup Tab.. end service.exe and reboot... wont delete it but in doing so should hold the trojan from bieng nasty on your system... spoOny. |
| Found c:\windows\services.exe (343KB; icon=folder w/ red lips) is harmful. Two copies are stored in: c:\windows\system\sservice.exe and c:\windows\system32\fservice.exe. Did not find anywhere else that described this. Scott |
| run msconfig , deselect services and reboot.....after this u can safe delete the file c:\windows\services.exe gigi |
| Guyz if havn't got the solution then you must use Miscrosoft Antispyware Tool. See also: Link Anand Kanojia anandkanojia |
| uses up you CPU resources up to 98% whenever you dial-up to the internet FEWO |
| you need it (the genuine windows file) to access internet in windows Joe |
| system shutting down by giving 60 second time Sean |
| it makes my computer slower mohammed younus ahmed |
| I have services.exe on my comp. and it was in the C:\windows\system\DRIVER dir. it was a system and hidden folder so i had to change that through DOS. Actually all executable files in that dir. were found to be viruses by norton. IH8 viri |
| This process if located outside C:\windows(or winnt)\system 32 is a malicious executable, possibly a variant of the sober worm. sr22ger |
| services.exe c:\windows\services |
| Using aim my friend sent me a link and a text that said "my new pix!' turns out it was a mass spread Services.exe and sent the same IM to all the people on my buddy list, it continuously spread that way, but yah same as above, i cant get rid of it! Ryan |
| services.exe in system32 folder takes 98% of my CPU, it freezes my system (2k). What's going on?? tressor |
| If it runs in C:\Windows\System32\ good if not bad See also: Link Link Erinaceus |
| It can be either. It is a legitimate windows service, but there is also a Trojan disguising itself as this service. In RegEdit, I found ??rvices.exe labelled as services.exe but when I displayed binary, it was actually U5rvices.exe BengalTigger |
| Tiff, I also have this file in that location (C:\windows\servicepakfiles\i386) I don't think you need to worry about it. Carbon |
| Causes windows malfunction , windows not responding, system shut down. Miguel |
| Opens up other process, very well a part of SpySheriff, an malicious piece of extremely aggresive spyware.(Active content download) Jerry |
| c:\windows\system32\services\srrvice.exe -Trojan!!! Alex Ti |
| It copies itself into C:\WINDOWS\WinSecurity with the name services.exe, damn it, when ever I run an anti virus or antispyware, it give an annoucement: "No virus found" immediately; and kill the antivirus or antispy process. I deleted its key in the registry, it restored right after I close the Startup-manager. DnherO |
| It lives in c:\windows\services.exe. It is running 2 ftp servers on my machine, one on port 5112 and port 51100...and another server at 5110 that spits out Sifre_EDITSifre_Hatasi when I connect to it with a socket client. John Serink |
| i have services.exe(379KB) in C:\WINDOWS\system32\service\services.exe, and i think this is a worm, but i can remove it... you know something about this process in this directory? thanks Tyrese |
| in start menu run/ run msconfig utility / startup . stop unwanted files |
| services.exe (that's plural folks..with an S on the end) is a genuine windows file. Completely safe if it's found in c:\windows\system32. As long as it is found in c:\windows\system32, it is normal and safe to be found in multiple directories also, as long as it is found in windows\system32 as well as any other directory, it is still completely SAFE. Otherwise, only if it is service.exe (that's singular, without the S folks), is it a trojan/worm/virus Samantha |
| You just cant do nothing because the services use 100% of my cpu!!!! Luis |
| located c:\windows\services.exe Will not delete. But wen i change the name it comes back. When i restart computer i get errors. Uses computer usage BEWARE... CAN BE USEFULL AND DEADLY TO UR COMPUTER Romeo5k |
| AVG reported C:\WINDOWS\system32\dllcache\win32\services.exe as Trojan Horse BackDoor.Iroffer.2.BJ trustworthy |
| It Slows down PC and shuts down Outlook Obereule |
| This program isn't needed unless you are using a tablet PC or other input device that can use it. It spawns insidiously and sucks up a ton of GDI objects crippling the way I work. Here is the link I found to remove it. See also: Link Rob |
| Thanks to 00s%b. Your info was great. Removing HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. is the way to go. MAC |
| I only have the file that came with my OS. BTW - "msconfig" works for XP. Other Windows OS (i.e., 2000) must use a different method. AND ... like "spoOny" said; there IS a difference between the needed system file "SERVICES.EXE" and the viruses. The system file has a very specific place it should be located. The viruses will be found in places other than that. Et Al |
| eats up CPU to 100% after 25 minutes of dial-up internet anonymous |
| Can Cause 100% CPU See also: Link Sam |
| Slows down your pc and internet connection. Norman Virus Control (NVC) found infected with W32/DLoader.CLZ. This file was located in the windows directory (c:\windows\services.exe). Norman Virus Control cleaned/removed it for me. Still got services.exe located at c:\windows\system32, but this one must NOT be removed, cause this file is a important part of windows. Stian |
| It downloaded Ad-ware every time I accessed the Internet, I found it with Windows search and deleted it using cut & paste to the recycle bin, life is good! LUDY |
| it makes my computer much slower.. NightKiller |
| cpu usage says its 100% full, multiple processes of the same service running on the task manager |
| it comes with windows xp home edition, i did format mi harddisk... and install just windows... its always there... windows shit! RSNG |
| I have win2000 and the file services.exe in system32 folder is a windows file but it takes all my cpu freezing the system, what is going on? MaldOne |
| It's nothing. I am resintalling my OS and everything is OK Milo Ice |
| I had to files in my system32 folder, both named services. When hovered over it showed that it was a Microsoft process. GsHustle.com |
| Norton Anti-virus deleted the malignant file, but left the registry keys intact - thus - Windows xp pro will start and give an error message for services.exe and isass.exe and hang - have to do a repair installation from the windows xp disk - Unfortunately Windows XP Pro came pre-installed - |
| I accidental deleted the real services.exe and now can't log on. I know, n00bish but how do i fix this? Joe |
| It is just a small variant of sd32.jghod.pune .. not dangerous at all Anis Jamadar |
| Needs to be in your \System32\ folder (if it's a legitimate version of the Services and Controller app) and is required to access the internet-- otherwise you can't get online. Marko |
| Service.exe on my servers is an adaptec storage manager pro process its Gr00vytunes |
| Unfortunetly, I was plagued by this annoying virus, too. I used Security Task Manager and tried getting rid of services.exe and fservices.exe (because they both had a little worm eating a paper icon next to them) I was bored so I just kept quarantining them and deleting them in the quarantine menu and finally they stopped showing up. Weird. David |
| just download the SecurityTaskManager and quarantin services.exe to remove it ian |
| Be very careful in removing this file from system32. Doing so may cause your computer to not start properly. By that, I mean you won't have a desktop or start menu or anything else. The computer slows to almost a standstill. If you've done this, you can repair by hitting Ctrl-Alt-Delete, going to the task manager, clicking File- Run, opening the cmd window, and restoring the file from another location where you previously backed it up. Andrew |
| services.exe and mstask.exe has been patched! replace them with the original ones from the Windows Install CD. You go'n see also the difference if you compare the with a HEX edit :) K.B. |
| omg its killing me, it suddenly appear on task manager and makes my net go slow and my comp go slow to and worst hang =/, STM says its on C:\Windows but i cant see it there instead its on C:\windows\system32, anyone can help me? ian |
| service.exe make my computer automatically restart if i run msconfig or regedit Frank |
| On my Compaq, it is a safe file used to pull up those unwanted pre-installed Compaq servicing pages. Very annoying thing that Compaq has pre-installed, but it's a safe file otherwise.. Adam |
| You need to be sure that you are running the REAL services.exe instead of the afflicted one. Check your windows directory for "services.exe", and your windows directory / system 32 folder and compare the two. If you have the one in the windows folder, you definitely have the trojan. However, if you are running the services.exe in the System32 folder, which you can tell by "Date Accessed" entry in the Properties window, then you are safe. It is a part of normal windows operation, but you need to be very sure. James |
| everytime i try to search this file (and other *ss.exe files) even on the internet, the computer restarts! mottalib |
| Takes up 365MB of RAM (windowsXP sp1) The Dude |
| I have 2 "services.exe" running in my task manager, one under SYSTEM, and one under the USER account.. I've scanned with almost anything, no luck.. Can't find it in regedit or the windows folder.. Did a search on my computer, still no luck.. It only found the originally services.exe.. What now, what comes next? KillTheNightKiller |
| It happens to me when I try to load any installation package...Do you have AVi anti-virus or Zone Alram? |
| Running a good antivirus with Buffer Overflow protection allows your pc to run normally but most times it reapers with logon. Reinstalling the OS is a good idea but not for all.I`ll try to resolve this. Check the link provided. See also: Link BesT |
| Very dangerous when deleted from windows/system32. If you lack the knowledge that you shouldn't delete it, it is extremely likely that you lack the knowledge to ever get your computer to start again after you have. |
| it's a windows file.. however, torjan disguises it self as Services.exe |
| Net Gear USB wireless adapter caused services mine to spike to spike between 0-10 then as the computer ran 0-100. It took me months to figure out what it was! Delete the netgear software and see if this is it! Services can look like other tasks is the problem, as it is handling these other tasks. Use Win Tasks to systematically nuke each process and see what they are doing |
| This is a critical system file that windows uses to execute certain files and network devices, there are known sources that replicate themselves as this process and can turn out be dangerous and malicious if found anywhere else than &systemroot%\&system&\services.exe delete it immediatly, dont end this process as it will cause a RPC remote protocal call and will shut down your computer Neal (logic pc person) |
| This is a vital Windows component and cannot be stopped, WinPatrol says. DigitalApocalypse |
| the file i had in the system 32 folder disappeared and i get 4 error messages everytime i log on to my account it tells me to remove it from the registry so i am LARDY |
| I just got infected with this an hour ago, after discovering it running under my services rather than system in the task manager i realised it was a trojan and using ad-aware SE pro process watch i disabled it and the other 2 processes running with it from the same directory (c:\windows\system32\foahktgm\services.exe) could then open msconfig and disable it, and then restarted, on restart it did load however it had deleted the config files for my avg firewall, i then used process watch to trace and delete the files manually, repaired the install on avg and now the system seems to be ok westy |
| efficiency ways against services.exe is symantec softwares & use of antispyware hamid |
| No detected viruses (NOD32), no spyware (Adaware), no other services.exe(deleted all of'em) and still got 60% of Dual Core 3.0 Ghz CPU occupied... Any idea what's going on? I do not remember Windows XP having larger CPU usage than all my other programs alltogether.... Saisin-Tae |
| It's an important part of Windows. I have Windows XP and installed a Bluetooth USB Adapter. After that my CPU usage was pegged permanently at 100%. Once I disabled the Bluetooth device and terminated its two process from Task Manager, services.exe stopped using all my CPU. So now I only turn on my USB adapter when I need it instead of having it on all the time. Henry |
| If services.exe file is located in Windows\system32 directory it's good. If not, it's virus. Sheridan |
| This is the most controversial - in most cases harmless system file. This is among many other things providing access to DNS, expecially if you are cable modem user. Therefore harmless, needs to act as server. In few cases this can dangerous if infected, Denial attack, or files resides somewhere else where it shoud be or it has been replaced with a crap. To go for sure alaways BLOCK it. If you see difficulty connectiing to internet, then you might have to check it and enable it... George Bush |
| I agree with the person above, it's definitly something nasty, but it wont let me fix it! PLease! if anyone knows how to fix it, please email me at Lord.Sparks@gmail.com. I beg of you! Lord Sparks |
| without it windows shuts itself down tharealmb |
| then it would light up like a christmas tree and go into old pattern. All behaviour of file indicated virus/trojan/hijack pattern as indicated in files above, but all searching indicated it was the correct windows file. My solution was to use the firewall to block services.exe from accessing the internet. all usage has stopped and computer is behaving properly. Kent Wilkens |
| services.exe is dangerous!! it is a virus and it restats my computer with an error saying it has to shut down the system. it gives 1 minute until shutdown and you cant close it in any way. |
| services.exe was installed in a windows system carpet when I try the free online antivirus scan by panda antivirus. When it was about to finish it puts the screen in blac, it destroys my desktop and paralized everything. I can onyy access myy disk in safe mode booting from a winxp disk. Ihave valuable data in my disk so I dnt want to just format it. i wantt o rescue my data. What can I do? Hirambc |
| Actually Isass and service.exe destroyed my comp... I hope It would be fixed soon.... hehehe Wils |
| In my case it is the Navision Server for our Database. It just takes up alot or memory, so I was wondering. ToGrok |
| services.exe is connecting via SMTP to various IPs, uses a lot of CPU, apparently the "real" Microsoft services.exe has been replaced by this unwelcome trojan. RE Young MCSE |
| It Shuts Down my Internet Connection. I found it as an enabled start-up file in RegEdit. I unchecked it. It sems to reside in c:/windows/pooldata, but I don't know if this is MS file or the Virus. I'm ttrying to eradicate it by using various virus scanning utilities, but I haven't solved it yet. Paul |
| the services.exe file in win2k forces a popup telling me there are errors on my drive and registry and it shows a link to downloadsites..if you use sygate personal firewall you can block this file and will have no problems with the file...when you first install sygate it will show a popup asking to block this file...click yes to block it at all times and you should have no problems...some people who have copies of win2k or xp home have this problem and is very easy to solve Adam |
| SOLUTION: /start, run, SERVICES,MSC Scroll down to: WINDOWS MANAGEMENT INSTRUMENTATION DRIVER EXTENSIONS; rt click, Properties, change Start Up Type to DISABLE; OK; Restart Computer. I had the problems mentioned--SERVICES.EXE was using all CPU. Located in correct folder. C:/WINNT/SYSTEM 32. Scanned with Spy & Virus--none found. System booted in Safe Mode OK. SERVICES EXE has a lot of services in it. The WMIDE was causing the problem on my computer. Check link for more info. See also: Link Don 08242007 |
| Services.exe caused my external hard drive to the following error: I can only open it via autostart on connection... or with right click -- open... Double click will cause the system message: "Choose program to open..." ph0enX |
| there seem to be a lot of people who think that services.exe ist bad... loki |
| I run Win 2000 Pro and have found that Services.exe is flagged by Zone Alarm as trying to connect to 255.255.255:DHCP which is a website in China. Also Zone Alarm flags Services.exe as trying to act as a server by connecting to 194.168.4.100:DNS and then 198.168.8.DNS if I refuse permission to connect to the first adress. I advise using Zone Alarm to guard against all server connections to your machine as they are rarely required. Do not bother to contact the Microsoft site regarding this, they could not care less about issues with older versions and you will get the run around. English Frank |
| It is running from 0 -30% CPU every 3 seconds. It does not run like that in safe mode. I have found it in C:\windows\servicepakfiles\i386 and in C:\windows\system32, and in C:\i386. Ztex |
| service handler for MSC |
| a windows pop-up shows it has detected an error in my c:\windows\system32\services.exe, then it *ALWAYS* makes my system restart every 30sec-1min.so... i deleted it... the problem is, th log-on screen wouldn't appear anymore.. just a dead black screen with a mouse cursor. Tarrent |
| My SpySweeper 5.5 found that services.exe in sustem32 was tryinh at access my register. Email tech support at Webroot but haven't heard back yet John Andersen |
| i had that file service and it was on my processes username i found it and the other file one has a s at the end one doesnt i deleted the on well it was known not just causes of the no s but cause it had a alien face and file name was doomsday i used a delete file on boot program cause it would let me delelte any other way no more virus ... thomhead76 |
| Internet Worm : Worm.Win32.RussoTuristo.b Can make Hide Folder Options Kill Files Has .exe Extension And More... See also: Link Diacauhitech |
| the always pop up if the system is busy. and this finish to rebot the computer the pop u. "windos connot find"C:\windows\services.exe". Make sure you typed the name corretly, and then try again." See also: Link sibed |
| its in the system32\drivers folder, STM says its 97% dangerous, key logging, file logging, screen logging, opens port :s casio |
| Installing Netgear WPN111 wirelesss adapter causes services.exe to lock up my desktop PC. No problem using same WPN111 adapter on my laptop. Vic Webber |
| There is a folder named services in C:\Documents and Settings\Administrator\Local Settings\Temp,,,, and each time i double click it a new services.exe start running as an administrator process.Each time I'm opening a folder it becomes an application file but after that i still can open it and all its contents remain unaffected,its only attacking the folders not the files,i dont know how to remove it, if anybody can suggest me it will be helpfull arindam |
| To kill the services.exe trojan virus: first remove services.exe from startup by using the HijckThis v. 2.0.2 program (this is a free program you can download, find it using Google). Then manually delete the sevices.exe file from the windows folder. (Make sure to leave the real services.exe file which is in the windows/system32 folder, as this is the real program and not a virus. horrorwitz |
| c:\windows\service.exe and W32.IRCBot.Gen Trojan attack appeared to be prefaced with some registry changes using javaa.exe - the attack was detected, blocked and virus removed all within 3 mins using Norton Security suite. By all accounts a very nasty intrusion allowing IRC etc. and your PC to be used in other attacks. I am sure there are various names used to try and hide/mask these trojan scripts - beware. See also: Link Smiffy |
| when i terminated this process, windows was forced to restart. it is a vital component to windows. darkangelofhell666 |
| C:\Windows\services.exe was an Win32.VB.htw Trojan. After some time it freezed my pc in mediaplayer or IE Daniel W |
| Dienststeuerungs-Manager |
| Dont delete this file or you will cant boot your pc.... i got bluescreen after deleted this file IHATETROJAN |
| When I removed auto updates, the services.exe in task mgr. and wuauclt went up in usage. Believe it's related to auto updates. Chaly |
| Took up 100% of CPU so I couldn't do anything. After manual restart with disk check, the thing runs perfectly and I've lost all links to "services.exe". Very odd. So a nightmare to begin but a restart solved... Greg |
| just encountered this services.exe and found the solution. just install the Registry Mechanic. i have the link below. then and Scan your computer and fix all the problems. if finish, start scan again. do it many time until it says something "complete or finish or no more problem found" See also: Link AUSTIN |
| services.exe with using epa.exe and epm.exe coming from erascent I deleted it from the registry then went to my computer local drive c wrote epa.epa delated all files in there but you must stop all processes before delete ctr alt delete bpaz |
| It is a safe file if in the right location (the system32 folder ONLY), but it is unknown why this service manager would need to connect to the internet (it tries to do DNS lookups) - it should be safe to allow in your firewall if asked, but DO make sure it's c:\windows\system32\services.exe and nothing else. wolfbeast |
| it only takes cpu when in idle... during operations it goes down to nomal usage. me |
| Followed advice from Henry above to turn off bluetooth agents (ANTagent) and services.exe stopped running. Nice! Scott in HI |
| I found it in Windows/system32/drivers, identified as TR/dropper.gen Astro |
| Services.exe is a long-running executable,which performs a specific function.It is also called as Service Control Manger(SCM).SCM maintains the database in the registry about the services.SCM only manages all the services which is running in the computer.It is the part of Microsoft windows operating system. Rajesh |
| its very dangerous it is found in many folders like c:\windows\system32 c:/windows/fonts etc MEhsan |
| Use task manager to check. If this file's username is you, it is trojan; if it's "SYSTEM" then it is safe. |
| services.exe is a windows service manager, although some trojans do pass themselves off as this file as well...i found that the most direct way to tell is in the 'User Name' field of task manager. the windows\system32\services.exe file is run by the system and will say SYSTEM as it's user. If you find services.exe running with your own user name in the User Name field, than ya probably have the trojan version of it running. ruder |
| Trojan horse.It resides in the folder C:\Program Files\mIRC.Keeps coming back after deleting it.Cant find any solution yet. Fred |
| Norton Internet Security - Blocks the right one: C:\Windows\System32\Services.exe AND Maybe lets through the bad one: C:\Windows\SoftwareDistribution\Download\e9500597a78495f397efb821e37bf356 Every Antivirus software scan shows it's clean Except - eSafe and it shows that it's a Win32.Banker it is a family of data-stealing Trojans. It can capture banking credentials such as account numbers and passwords from the user. My other problem is that I need to get Norton Internet Security to accept the correct one in: System 32 folder AND block the one in: Windows\SoftwareDistribution\ ProFlex |
| windows/system32/services.exe in this location, is a legit file. It can't be turned off from task manager if it's being triggered(needed) by applications e.g. event log, plug & pray, autoupdate. IF it becomes a resource hog, then your problem lies in the apps that trigged it. Windows Defender has a tool "software explorer" that shows you what triggers(depends on) exe files running in your task mgr. It's under User Name and Services. Control what process will run on your comp thru services.msc rather than regedit. For guidance google eldergeek or blackviper. Mad Hatter |
| Spamming error messages and keylogging. It is in C:\Program Files\install\service.exe |
| Routing and Remote Access |
| Windows Service Manager. You might want to check if it's a false copy, however. SgtLion |
| Mine is in AppData, cant delete even as admin. Runs at about 1200k in processes. It says 'you do not have permission on deletion even after confirming admin boxes (using vista). Previously had another few viruses I got rid of in appdata they keep coming back as something else! its Trojan btw, and avg cant pick any of em up. Computer Shredder |
| ok thanks, just that i have picked up viruses that have disabled my task manager! I think I may have to call someone in to sort this problem out. mine's in system32/drivers, so it should be ok? Dan. |
| I was created in AppData/Roaming/Microsoft , NOD32 Win32/Injector.BWB trojan Stewox |
| This file is a virus.CPU always 100%. cross |
| resides in c:\system colume\information\microsoft with smss.exe - both are infiltration files detected by NOD32 JovenRP |
| This is the most dengerous threat, and cleans up everything. Neet |
| if it is in the directory c:\windows\ or c:\winnt is a malware. Madrikeka |
| Tracked down why services.exe was hogging my CPU making my computer unusable. Turned off "File Sytem Shield" of Avast Antivirus and the problem went away. BrianH |
| In cases where it's a virus it will shutdown your firewall it just shut mine down as I'm typing this. virushunter |
| Services.exe is no virus ! It might be high in CPU-Usage if you use a lot of software ! service.exe without "S" might be a virus ! Surgeon |
| This file is important component for Windows. Siad |
| I found it in the windows/system32 directory , i run it and i t showed the services window , how to change startup programs , and it is harmless Jonhhy94 |
| Ways to detect if it is spyware or valid See also: Link Allen White |
| Windows XP uses this tool to manage Services, shutting down this process may cause system error. BREE |
| I started having a problem early yesterday morning with my PC and services.exe is using from 11-30% of my CPU. I'm not getting a full boot under any method. I only got on the web by using Task Manager in XP. One thing I really need to say is that when we have a problem such as this the posters should be very careful with their spelling and syntax so as to not confuse everyone else. Thx. Bob Miller |
| This is the Services and Controller App Manager for all NT based systems. If you delete the one located in C:/Windows/system32 then the next time you boot, Windows will no longer be able to start because this is a core Windows file and is required for Windows to function properly. If it is names service.exe or fservice.exe then you have some form of malware infection. TechWizard86 |
| "c:\windows\security\Windows Security Services\service.exe" is backdoor (kaspersky proactive defense) ahmed |
| Found it in C:\Users\username\AppData\Roaming as Win32:VB-ZOB [Trj] Brian |
| C:WINDOWS\$hf_mig$\KB9565... found in search of services .exe in three different folders two same file version and 1 is differenrt file version are there any indication of being a virious i googled C:WINDOWS\$hf_mig$\KB9565... and there are no findings BrotherV |
| Do NOT Delete System 32 or any thing in it, your computer will not boot because system 32 is valuable in the ENTIRE system. IF someone tells you to delete system 32, someones been trolling. 12stringwizard |
| There is a trojan svcs.exe that copies itself into c:\Windows or c:\Windows\System32. Rating on it in either case is high. The trojan works as a worm infesting your temp files with tracking cookies that over rides ping.exe at the same time loading down your hard drive like a worm. It also takes over other services driving your CPU to 100%. IF not found right away it could seriously damage your computer. Sense it hides as a Windows service most antiviruses won't catch it. Only known one that works is Webroot. Grey Hatter |
| easy to get rid of go to view hidden folders go to C/documents settings you Application data it will be there as service/service.exe rename it then use a programme to romove it your comp will restart automatically because thats the nature of the virus but will be unable to start due to the renaming of the virus then use a reg clean to remove any bits left i find ccleaner great mike |
| Even if inside System32 can still be virus. But Windows still recognises as a system file which it should. Can cause serious issues if the System32 Services.exe gets infected. watch out. Oscar |
| The file itself is not dangerous. It is a standard part of windows. However I just removed a virus that patched system32\services.exe called Trojan Patched c.LYU. Just get a new services.exe file, and replace it. If you can not delete the original file, then rename it, then copy the new one, then delete the renamed one. Please remember to back up before you edit anything. Dean Tuffey |
| Run ESET Online scanner immediately. Then Run tdsskiller. Then Run Malwarebytes Malware removal tool. Once you have finished, clean and defrag registry. These are all free and will remove 99% of viruses,malware and rootkits. Services.exe is required and can't be removed it the virus replaces the original file,then your anti virus removes it, and allmost instantly the virus will reinstate it and the cycle begins. Donmega |
| i tried to delete it and couldn't delete it, it would not let me. I restarted my computer and now windows will not boot up i get the blue screen of death every time and it resets. david P |
| It's a trojan, try using HijackThis Open the Misc Tools section Open Process Manager then kill process c:\windows\services.exe then go to C:\WINDOWS and manual delete services.exe Restart and that's all KenEzthex |
| The services.exe file is a part of the Microsoft Windows Operating System which manages the operation of starting and stopping services. It also deals with the automatic starting of services during the computers boot-up and the stopping of services during shut-down. This program is important for the stable and secure running of your computer and should not be terminated. services.exe should be located in %SystemRoot%\System32, if instances occur elsewhere they may be viruses, trojans or other malware. If this file infected it can be replaced with a clean system copy by using the Microsoft System File Checker, see below for instructions. 1. Go to Start All Programs Accessories. 2. Right click on Command Prompt. For Windows XP: Choose Open. For Windows 7/ Vista: Choose Run as Administrator. 3. On your Command Prompt window, type in: For Windows XP: sfc /scannow For Windows 7/ Vista: sfc /scanfile=C:\windows\system32\services.exe 4. Press Enter. The result will be shown and it should also say it needs a restart. 5. Restart the computer for the file to be replaced. Run an AV scan to confirm the services.exe file is now clean. You may need access to your OS installation discs to run the MS system file checker. Lee |
|
|
based on 274 votes. Read also the 264 reviews.