services.exe running wild

  • Thread starter Thread starter Steve
  • Start date Start date
S

Steve

Norton AV said that services.exe was found to be a virus.
I think it was ad-aware that deleted it from a directory
other than windows\system32\ Just before running that I
did see that there were two services.exe programs
running. Even re-running Norton AV while in safe mode
(which did nab some more stuff) didn't take out that final
services.exe in \system32\, and task manager wouldn't stop
that one as it called it a critical process.

I left it in place.

However, after rebooting to regular mode, now services.exe
constantly tried to run at 99% cpu time. The best I can
do to reduce the effects on other processes is to reduce
it's priority to very low, but I really don't like having
some program running wild at 99% cpu time all the time.

Any ideas as to what is going on?

Do I need that file?

Should I rename it while in command prompt mode to
neutralize it (but in a reversible manner)?

Any help or ideas much appreciated.
 
I have been fighting this problem for a week now! Iam running W2K an
two instances of services.exe strtup at boot. I am using AATools t
stop the second services.exe and CPU drops to 0. All else works fin
then. I think it may have something to do with CoolWebSearch.xpsyste
(Adware)which I removed a couple of times with CW Shredder. I think an
W2K PC will do this if you run a second instance of services.exe b
start\run\services.exe. So what is forcing windows to start tw
services.exe. I can't find it but I'm just a hack. Microsoft say
Microsoft Knowledge Base Article - 280802 Starting Services.ex
Interactively Uses 100 Percent of CPU Time. I think this may be a clue


-
ff684
 
ff6849 said:
*I have been fighting this problem for a week now! Iam running W2
and two instances of services.exe strtup at boot. I am using AATool
to stop the second services.exe and CPU drops to 0. All else work
fine then. I think it may have something to do wit
CoolWebSearch.xpsystem (Adware)which I removed a couple of times wit
CW Shredder. I think any W2K PC will do this if you run a secon
instance of services.exe by start\run\services.exe. So what i
forcing windows to start two services.exe. I can't find it but I'
just a hack. Microsoft says Microsoft Knowledge Base Article - 28080
Starting Services.exe Interactively Uses 100 Percent of CPU Time.
think this may be a clue. *
Click to expand...

I'm working on the same thing. I think you're on to something.

I have two instances of services.exe on Win2K Pro SP4. By downloadin
ProcessExplorer, I see that the "good" (low CPU) one is a child o
winlogin.exe. The "bad" one (CPU hog) is a child of Explorer.exe, an
isn't running anything useful.

Both of them are in the right directory:
{windows}\system32\services.exe

It's not mydoom or one of the other worms.

I also don't know what's causing the second instance to start up, an
there's a workaround in that it appears I can safely kill it wit
ProcessExplorer. But this is ugly. (I left technology 10 years ago
but I still know when I'm doing something ugly.)

I've ruled out the corrupted event log problem. Event logging work
fine.

I've ruled out DHCP as a problem. Static IPs and disabling DHCP doesn'
help.

Any insights welcomed. I had no idea services.exe would be s
interesting.

--Davi


-
dbkayand
 
Back
Top