Martyt1988
asked on
Strange service
i have a wondows xp machine sp3 with a strange service " jspxihjfb ", and it is set to automatic yet not started, I fear this may be indicating a virus, any second opinions?
If you look at the service's properties, what executable does it point to?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
@aadih
Please delete the service that is definitely suspicious.That is not good advice. Blindly deleting services opens up the possibility of inadvertently breaking the system. Try to identify what the service is; then delete it if it's not important to the system.
The service is clearly an invalid (malware, virus, trojan) service. Have seen it, done it, hence the advice. Worry not in deleting this service.
ASKER
service has been removed and will continue to monitor , may need to re-load
You are probably right aadih, bit it would be prudent to verify that it is a malware related service before deleting it completely.
For all we know the machine could be a developers box and that might be a test name for a legitimate service that is under development.
Disabling the service and performing multiple full sweeps with various products would be the logical next steps, if they find something they may disable or delete the service themselves.
For all we know the machine could be a developers box and that might be a test name for a legitimate service that is under development.
Disabling the service and performing multiple full sweeps with various products would be the logical next steps, if they find something they may disable or delete the service themselves.
What is the executable that the service points to?