Chris:
You may THINK you have checked you system but, there is a starting point and the below
ainstructions are that start. You may think your AV is up-to-date but my experinece
indicates this is NOT always the case. In fact, I just helped somone who stated their NAV
was up-to-date, but, they were still infected with several Trojans and two internet worms.
Especially since SERVICES.EXE is the name of the file used by Mydoom and Netsky Internet
worms and a couple of Downloader Trojans.
PLEASE humour me and and follow my below suggested instructions.
1) Download the following four items...
McAfee Stinger
http://vil.nai.com/vil/stinger/
Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp
Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp
Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/
Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")
Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt271.zip
Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.
2) Update Adaware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using Trend Sysclean, Stinger and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using the three
utilities; Trend Sysclean, Stinger and Adaware
7) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point
* * * Please report your results ! * * *
Dave
| i've tried everything! no matter what i do i can't stop services.exe from
| using 100% of my cpu! and before anyone thinks of the word "spyware" i've
| checked, checked again and then re-checked! i have an up to date virus scan
| and firewall but there is still no stopping services.exe
| i thought it might have been a virus that took that name but that would show
| up on a virus scan wouldn't it?
|