Ask Me Help Desk

Ask Me Help Desk (https://www.askmehelpdesk.com/forum.php)
-   Windows (https://www.askmehelpdesk.com/forumdisplay.php?f=237)
-   -   Windows\services.exe registry entries (https://www.askmehelpdesk.com/showthread.php?t=413520)

  • Nov 7, 2009, 01:46 AM
    joexander
    Windows\services.exe registry entries
    Hi all. My antivirus found and quarantined windows\services.exe which I understand is a virus and not the system file. With it quarantined however, when I boot I keep getting the error "Could not find windows\services.exe. Please check filename etc." I've searched HKLM and HKCU Run folders but did not see any entries that had this same filename. I have also checked my Startup Tab in Msconfig and found nothing there either.

    Can someone help me out?Is there another registry folder I should be looking in?Or another filename I should be looking for?

    Thanks very much.
  • Nov 7, 2009, 02:37 AM
    Scleros
    Quote:

    Originally Posted by joexander View Post
    Is there another registry folder i should be looking in?

    If the reference is in the registry, an easy way to find it is by searching for it using the registry editor's Edit Menu > Find and Find Next commands. Also, sometimes malware will register as a browser helper object and have numerous registry references.
  • Nov 7, 2009, 08:03 PM
    GrantHillsSA

    I think you might have had a file infecting virus.

    Open your antivirus, go to your quarantine. Look for services.exe.
    If it is there, just check the virus name next to it.
    Go to the antivirus's website and read up about the virus.

    You see normally a virus would manifest on your PC as a file, with it's own name etc... Example LoveBug.exe.
    When the Avirus detects it, it will quarantine or remove it. And all is well.

    A file infecting virus will attach itself to your file's data. Example,
    CALC.EXE (file size 560KB) is your pc's calculator program. The virus attaches itself to CALC.EXE and now the file size is 620KB.
    Obviously your antivirus will detect CALC.EXE as a virus and remove the file. Now your PC sits without a calculator.
    Most antivirus companies have special removal tools for these viruses listed on the're websites.

    Here is the tricky bit, you will have to retore all the infected files, basically infecting the PC again.
    But now running the removal tool, it will save your application and just remove the virus.

    Hope this helps...
  • Nov 8, 2009, 03:15 AM
    joexander
    Hi guys, I appreciate the help.

    Quote:

    Originally Posted by GrantHillsSA View Post
    I think you might have had a file infecting virus.

    A file infecting virus will attach itself to your file's data. Example,
    CALC.EXE (file size 560KB) is your pc's calculator program. The virus attaches itself to CALC.EXE and now the file size is 620KB.
    Obviously your antivirus will detect CALC.EXE as a virus and remove the file. Now your PC sits without a calculator.
    Most antivirus companies have special removal tools for these viruses listed on the're websites.


    I understand what you mean but I don't think it applies in my case as the actual system file is found in the path windows\system32\services.exe and not windows\services.exe.

    Still looking for a fix for this.
  • Dec 28, 2010, 09:47 PM
    jolin_ee
    I've no idea,but if you want to optimise your computer,you can use tuneup360

  • All times are GMT -7. The time now is 12:05 AM.