services.exe????

hey peoples hope you can help me out if searched the archives and havent found exactly what im looking for. heres my problem:

when i first turn on my computer and everything starts to load. about 30 secs into start up (background up, icons displayed) at the top left hand corner of the screen the will be a very small window, well its not a window just the top part of a window were it displays link location and also has your minimize, restore, and close boxs. well that alone wouldnt be all that bad, but this thing says internet explor..... (its small so thats all it displays) and starts flashing. like once every 2 secs. everytime it flashes it takes my cursur to a certain part of the screen. if i move it, the bar flashes and takes it back to that spot. leaving it useless.

ive managed to hit the close key and most of the time it doesnt work, but once it actuly gave me a "this program isnt responding" with a end now. it said something to do with SERVICES. when i try to end services from the windows task manager. it says "this is a critical system process. Task manager cannot end this process". so ive been starting up in safe mode so i can at least go on line.

hope someone can help. ive ran spybot s&d, adware se, and a drivecleaner. im not extremly computer literate, so i might say "ok how do i do that?"

 

Here what i found

services.exe is a part of the Microsoft Windows Operating System and manages the operation of starting and stopping services. This process also deals with the automatic starting of services during the computers boot-up and the stopping of services during shut-down. This program is important for the stable and secure running of your computer and should not be terminated.

Note: services.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

Determining whether services.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.

So i check mine i have XP pro SP1 and it is in windows/system32

If you have this file somewhere else you have a trojan if not you are okay...

 

sorry to jump in on this thread clark. you mentioned services.exe should only be in system32. i done a search for it and i have it in windows\servicepackfiles\i aswell. should it not be in there? thanks..

 

The Nevg.B virus copies itself to the
c:\windows\system folder (not \system32)
as system.exe
The file size is 51270 bytes

The proper file size is 90,000 or 100,000 bytes and it is located in the c:\windows\system32 folder or the c:\i386 folder

do a search for services.exe (dont forget to enable show hidden and system files, and check sizes and locations.

Manual removal instructions can be found at

http://www.symantec.com/security_response/writeup.jsp?docid=2004-081700-2526-99&tabid=3

If you find it, kill it then go to the malware removal forum in case you have anything else.


Studio T

 

Yes it is ok in service pack and other backup locations, so long as the file size is just over or under 100k (88k/91k for Windows 2000 and 101/105K for XP), I don't have Vista sizes.

StudioT

 

thanks for that studiot. i was worried there for a minute

 

The Nev virus is particularly worrying if you have Norton Antivirus as is redirects one of the principal devices of Norton - CCapp.

Sorry folks my first post should have read copies itself as services.exe NOT as system.exe

Mea culpa

Studio T