Computing.Net > Forums > Windows XP > Possible services.exe virus?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Possible services.exe virus?

Reply to Message Icon

Name: aeroripper
Date: June 8, 2004 at 10:22:00 Pacific
OS: WinXP
CPU/Ram: XP 2400+/512
Comment:

I have services.exe, smss, and csrss all running in my tasks... and i never had those running before

I was playing a online game and somebody got pissed at me and i think he tried to give me a virus because the game froze and some ftp.exe wanted access to the internet and a couple others (which all were denied, of course :-D )

then after that a windows XP thing popped up and said that "certain system drivers have been overwritten and need to be reinstalled from the XP cd, but when i clicked to find the XP cd and reinstall them it just said it didn't find the cd.....)

so now services.exe is running, smss and csrss are running (all in the folder c:\windows\system32)

I've run virus scans (panda activescan said it disinfected my "system" that was infected, and didn't find any infected files on the HD, and anti-spybot programs but i can't get rid of them

any ideas?




Sponsored Link
Ads by Google

Response Number 1
Name: pumfa
Date: June 8, 2004 at 10:53:56 Pacific
Reply:

These are all system processes. I don't think you have a problem. Here is an explanation of the processes you were asking about.

http://www.plasma-online.de/index.html?content=http%3A//www.plasma-online.de/english/help/solutions/nt4_processes.html

Pumfa


0

Response Number 2
Name: Solarian
Date: June 8, 2004 at 11:00:56 Pacific
Reply:


aeroripper:

Sounds like you've been infected with Worm.Win32.Ladex (scroll to bottom of webpage at link).

LINK

Solarian


0

Response Number 3
Name: trdj
Date: June 8, 2004 at 16:23:36 Pacific
Reply:

not discounting the fact that you could be infected with a virus, the processes you mentioned are indeed system processes that typically run w/ XP.

Now the FTP.exe thing sounds a bit crazy, and I would be interested in the directory that one was running from.

If you are worried that you have had valid windows system drivers/files overwritten/modified/lost you can have XP check these by pulling up the CMD window and typing:

C:\>sfc /scannow

This will scan and repair/replace any corrupt/missing system driver/file. It may prompt to reboot and instert XP CD, just follow the prompts.

If you could do give us a list of all your currently running processes that would be a big help too in someone getting back to you with the real culprit :)

Thanks.

- Michael


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows XP Forum Home


Sponsored links

Ads by Google


Results for: Possible services.exe virus?

services.exe eats memory www.computing.net/answers/windows-xp/servicesexe-eats-memory/156257.html

c:\windows\services.exe and port 80 www.computing.net/answers/windows-xp/cwindowsservicesexe-and-port-80/108695.html

services.exe problem www.computing.net/answers/windows-xp/servicesexe-problem/127094.html