?
Solved

2 Instances of Services.exe running on Task Manager, one of which uses up 100% CPU

Posted on 2006-04-25
6
Medium Priority
?
245 Views
Last Modified: 2013-12-03
Hi,

I've got a Windows 2000 machine on my domain that has suddenly developed 2 instaneces of services.exe running in Task Manager. One of the services.exe uses up little RAM or CPU time whereas the other max's out the CPU 99% all the time.

I've checked the location of both serivces and it's running from the WINNT\System32 folder, so nothing strange there.

I've virused scanned the PC (even though it's protected by a centrally distrubuted AV program) and go no results.

I've ran a sfc \scanow and again, this didn't turn up anything.

I really don't want to reinstall the OS from scratch, can anyone suggest anything? The only short term fix i've managed for this is using Security Task Manager (a seperate download) in order to end the 99% process.

Thanks.
0
Comment
Question by:Encams
  • 3
  • 3
6 Comments
 
LVL 30

Accepted Solution

by:
Irwin Santos earned 2000 total points
ID: 16532781
You got spyware

Download and Install.
http://www.majorgeeks.com/HijackThis_d3155.html

Copy and paste your log to:
http://www.hijackthis.de/index.php?langselect=english
Click ANALYZE

Look for NASTIES and post your results here
-------------------
Download Ewido, http://www.ewido.net/en/download/, install, open program, check for updates, restart computer, press F8 before windows logo appears, select safe mode, open Ewido, run full system scan. let Ewido delete all it finds, if anything is called serious by Ewido, disable Norton's Goback, and run Ewido again.
0
 

Author Comment

by:Encams
ID: 16532840
F3 - REG:win.ini: run=c:\winnt\system\services.exe    

Unknown   the following information has been found about this entry: .
   Unknown application.

 O4 - HKLM\..\Run: [Services] C:\WINNT\System32\drivers\media\cat32\services.exe    

Nasty   Added as a result of the ALETS VIRUS! Note - this is not the valid Windows Service Controller (services.exe) process
Hit rate: 80,77 % (result)
   Must be fixed!

O4 - HKLM\..\Run: [mapwin32] C:\WINNT\system\services.exe    
Unknown  
Hit rate: 0,00 % (result)
   Unknown application.

O4 - HKCU\..\Run: [Windows Compliant] winole.exe    
Nasty   O4 - HKLM..Run: [Windows Compliant] winole.exe
Hit rate: 100,00 % (result)
   Must be fixed!


These are the only ones that show up as possibly nasty or have services.exe in the description.

C:\WINNT\System\services.exe doesn't exist in filemanager, nor does C:\WINNT\System32\drivers\media\cat32\services.exe

Shall i remove all those enteries then try the Ewido program?  
0
 
LVL 30

Expert Comment

by:Irwin Santos
ID: 16532856
YES

FIX in Hijack first.. then run Ewido
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:Encams
ID: 16533063
Sorted!

Think it was the Hijack this that solved it although the Ewido picked up 1 java object.

Can you recommend a good anti-malware ot anti-spyware program that i can run from a central location like my WSUS server and my AV control center?
0
 

Author Comment

by:Encams
ID: 16533096
Thanks for the quick reponse btw :)
0
 
LVL 30

Expert Comment

by:Irwin Santos
ID: 16535998
cool.  thank you!

SpyDoctor is highly rated.. though currently I have both Ewido & Windows Defender running.  None of these are bulletproof.. though I found that Ewido fixed most of the malware items.
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question