2 Instances of Services.exe running on Task Manager, one of which uses up 100% CPU

Posted on 2006-04-25
Last Modified: 2013-12-03

I've got a Windows 2000 machine on my domain that has suddenly developed 2 instaneces of services.exe running in Task Manager. One of the services.exe uses up little RAM or CPU time whereas the other max's out the CPU 99% all the time.

I've checked the location of both serivces and it's running from the WINNT\System32 folder, so nothing strange there.

I've virused scanned the PC (even though it's protected by a centrally distrubuted AV program) and go no results.

I've ran a sfc \scanow and again, this didn't turn up anything.

I really don't want to reinstall the OS from scratch, can anyone suggest anything? The only short term fix i've managed for this is using Security Task Manager (a seperate download) in order to end the 99% process.

Question by:Encams
    LVL 30

    Accepted Solution

    You got spyware

    Download and Install.

    Copy and paste your log to:
    Click ANALYZE

    Look for NASTIES and post your results here
    Download Ewido,, install, open program, check for updates, restart computer, press F8 before windows logo appears, select safe mode, open Ewido, run full system scan. let Ewido delete all it finds, if anything is called serious by Ewido, disable Norton's Goback, and run Ewido again.

    Author Comment

    F3 - REG:win.ini: run=c:\winnt\system\services.exe    

    Unknown   the following information has been found about this entry: .
       Unknown application.

     O4 - HKLM\..\Run: [Services] C:\WINNT\System32\drivers\media\cat32\services.exe    

    Nasty   Added as a result of the ALETS VIRUS! Note - this is not the valid Windows Service Controller (services.exe) process
    Hit rate: 80,77 % (result)
       Must be fixed!

    O4 - HKLM\..\Run: [mapwin32] C:\WINNT\system\services.exe    
    Hit rate: 0,00 % (result)
       Unknown application.

    O4 - HKCU\..\Run: [Windows Compliant] winole.exe    
    Nasty   O4 - HKLM..Run: [Windows Compliant] winole.exe
    Hit rate: 100,00 % (result)
       Must be fixed!

    These are the only ones that show up as possibly nasty or have services.exe in the description.

    C:\WINNT\System\services.exe doesn't exist in filemanager, nor does C:\WINNT\System32\drivers\media\cat32\services.exe

    Shall i remove all those enteries then try the Ewido program?  
    LVL 30

    Expert Comment


    FIX in Hijack first.. then run Ewido

    Author Comment


    Think it was the Hijack this that solved it although the Ewido picked up 1 java object.

    Can you recommend a good anti-malware ot anti-spyware program that i can run from a central location like my WSUS server and my AV control center?

    Author Comment

    Thanks for the quick reponse btw :)
    LVL 30

    Expert Comment

    cool.  thank you!

    SpyDoctor is highly rated.. though currently I have both Ewido & Windows Defender running.  None of these are bulletproof.. though I found that Ewido fixed most of the malware items.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now