Search filename

 
Home page
Download
File information
Helper forums

Database statistics
Total:  617,352
Whitelist:  174,916

Top process list
svchost.exe
iexplore.exe
csrss.exe
rundll32.exe
lsass.exe
alg.exe
wuauclt.exe
ccapp.exe
explorer.exe
ctfmon.exe
spoolsv.exe
services.exe
smss.exe
jusched.exe
winlogon.exe
mdm.exe
rthdcpl.exe
hkcmd.exe
msascui.exe
alcxmntr.exe

Services.exe

services.exe - Système d'exploitation Microsoft(R) Windows (R) 2000 - Microsoft Corporation
Run a Free Scan for SERVICES.EXE related errors

Services.exe file description
Services.exe with description services.exe is a process file from company Microsoft Corporation belonging to product Système d'exploitation Microsoft(R) Windows (R) 2000.
In total there are 19 launchpoints for this file including "Running processes".
There are 15 different variations of the file in our database and the file is digitally signed from Microsoft Windows - Microsoft Time-Stamp Service
We do not recommend removing digitally signed files from Microsoft Windows

What is services.exe?
Services.exe is the Windows Services Control Manager. This process is responsible for starting, stopping, and managing system services. Services.exe will start automatic services on boot and stop all services on shutdown.

This process is a critical system process and is essential to the operation of the system. Due to the critical nature of the process, it is not possible to terminate it via the task manager. Disabling this process otherwise will render your system unbootable. The screenshot below illustrates how this process should appear in the task manager:



As you can see in the above screenshot, services.exe always runs as SYSTEM. A process with this name running as a different user is a strong indicator of a malware infection.

Dangers of services
As this is a critical system process that runs on every Windows NT-based (2000, XP, Vista) machine, it is common for virus writers and spyware vendors to disguise their malware as the genuine one.

Some malicious files will have the same name but will be stored somewhere other than in %SystemRoot%\System32. Other malware will use a name that appears similar to it but with slight differences in spelling or with appended digits. The following malware is known to disguise itself as services.exe:
  • W32.Randex.R (%SystemRoot%\service.exe)
    • Randex is a worm that infects systems through network shares.
  • W32.HLLW.Kazping (%SystemRoot%)
    • This is a virus that spreads through KazAa shares that attempts to perform a distributed denial of service attack on a predefined website.
  • W32.XTC.Worm (%SystemRoot%)
    • This is an IRC backdoor Trojan which connects to an IRC server to receive commands from a remote attacker.
  • Backdoor.win32.Prorat.19g
  • W32.Mydoom
There will always be exactly one instance of this process running at any given time. The presence of multiple instances is a strong indicator of a malware infection.

Common problems
  • Services.exe causes a Blue Screen of Death
    • Viruses and spyware can cause this problem. Ensure that your system is not infected with malware
    • If your system is not infected, then something is wrong with the genuine services.exe. You should perform a repair installation of Windows.
  • This process uses 100% CPU time
    • If you are using Windows 2000, be sure you have Service Pack 4 or later.
    • If this happens when your firewall software is prompting to allow services.exe access to the internet, you probably have a malware infection.
    • If you have ZoneAlarm or Symantec Norton software, try uninstalling them (after updating and scanning your system for viruses first).

Automatic startup locations
001 Running Processes
002 Autorun registry entries local machine
003 Autorun registry entries Current User
004 All users startup startmenu
005 Current user startup startmenu
008 Autorun registry entries Default user
009 Autorun registry entries SYSTEM user
010 Installed services
033 Winlogon Userinit
034 Winlogon Shell
035 Active Setup Installed Components
065 Image File Execution Options (debugger)
073 %windir%\Tasks
139 Windows\load
140 Windows\run
146 AlternateShell
166 HKCU Policies\Explorer\Run
167 HKLM Policies\Explorer\Run
191 Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run

File versions in our database
  Company  Version  Size 
n/a  n/a  4294967295 
n/a  1.00  4294967295 
Fearghus & Mitchell Co.  1.00  4294967295 
Microsoft Corporation  5.00.2195.7035  4294967295 
Microsoft Corporation  5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)  4294967295 
Microsoft Corporation  5.1.2600.5512 (xpsp.080413-2111)  4294967295 
Spyone Software  3.00  11689984 
Spyone Software  3.00  11685888 
n/a  n/a  11451877 
n/a  n/a  11451859 
n/a  n/a  11450853 
n/a  n/a  11450323 
Syncsoft Softwares  4.03  10301440 
Syncsoft Softwares  4.00.0003  8888320 
n/a  2008.8.25.0  8297472 

Digital signatures found for this file
  Signer of certificate  Issuer of certificate 
Microsoft Windows  Microsoft Time-Stamp Service
Microsoft Windows  Microsoft Timestamping Service
Microsoft Windows  VeriSign Time Stamping Services Signer
Microsoft Windows 2000 Publisher  NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
Microsoft Windows 2000 Publisher  VeriSign Time Stamping Service
Microsoft Windows 2000 Publisher  VeriSign Time Stamping Services Signer
Microsoft Windows 2000 Publisher (Europe)  VeriSign Time Stamping Service
Microsoft Windows 2000 Publisher (Europe)  VeriSign Time Stamping Service CA SW1
Microsoft Windows Component Publisher  Microsoft Time-Stamp Service
Microsoft Windows Component Publisher  Microsoft Timestamping Service
Microsoft Windows Component Publisher  VeriSign Time Stamping Services Signer
Microsoft Windows Publisher  VeriSign Time Stamping Service
Microsoft Windows Publisher  VeriSign Time Stamping Services Signer
Microsoft Windows XP Publisher  VeriSign Time Stamping Service
Microsoft Windows XP Publisher  VeriSign Time Stamping Services Signer

MD5 security rating in our database
352 files (Not yet rated and not signed)
3 files (Not yet rated and digitally signed)
10 files (Safe and not signed)
340 files (Safe and digitally signed)
Some versions of this filename have not yet been checked for safety.
Fix services.exe application error:  Run a free registry scan
Warning: Some malware might rename itself to services.exe. Always make sure that your file is from a verified publisher.
User comments for Services.exe
There are no comments yet.


Please add your comments if you have more information about this file.


File rating :

Are you human? How much is 10+15:


Browse files by letter
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
More system processes
servicescache.exe servicesceleton.exe ServiceScheduler.exe
serviceservice.dll serviceses.exe servicesetup.exe
servicesg.exe serviceshellnt.exe serviceslib.dll
ServicesOptimizer.exe servicestub.exe servicesys.dll