services.exe...legit or not?

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by bobgure, May 6, 2006.

  1. bobgure

    bobgure Private E-2

    Hi,
    I've already finished the 'Read and Run..'
    I'm supposed to be clean.
    However Process Explorer alerted me to 'services.exe' running.
    I understand that this file is legit if found only in Win\Sys32 which this one seems to be.

    Anyway,I did a search and found a second 'services.exe' in my i386 folder.
    Am I correct in assuming that this might be the dreaded W32Sober Virus and should be deleted? Haven't as of yet until you can confirm this for me.

    Thanks,
    Bob
    winxp home sp2
    p4 3.0
    512 80gb
    IE 6.0.2900
     
  2. bobgure

    bobgure Private E-2

    Why was this not posted as a "New Post"?
    What did I do wrong....(gulp!).

    Bob
     
  3. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    the copy in i386 should be legit. The i386 folder contains the w
     
  4. bobgure

    bobgure Private E-2

    Thanks.
    I will not delete it then.

    BTW....Why was my 1st post not posted as a "New Post", but 'subscribed to this thread?'
    What did I do wrong?
    Not answered in FAQ.

    Bob
     
  5. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Your first post to a thread automatically subscribes you the thread; so, if you start a thread same thing happens.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds