repairing services.exe

[isaac2004]

hi i am having recent troubles with my computer. it has been runnning
very slow and on startup, about 30 Visual Studio Errors come up saying
that an unexpected handling error has occured in services.exe. i tried
to repair my windows installation but it didnt help. my question is is
there any way to repair only services.exe, could it be a virus or
driver issue that would cause this. im pretty computer savy but i cant
find anything on the net for help. thank you

 

[Malke]

hi i am having recent troubles with my computer. it has been runnning
very slow and on startup, about 30 Visual Studio Errors come up saying
that an unexpected handling error has occured in services.exe. i tried
to repair my windows installation but it didnt help. my question is is
there any way to repair only services.exe, could it be a virus or
driver issue that would cause this. im pretty computer savy but i cant
find anything on the net for help. thank you

What is the malware/virus status of the machine? If you think it is clean,
what programs (and versions) did you use to determine this?

Be sure the computer is clean:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke

 

[isaac2004]

the computer is clean its just that maybe there is some virus that
attacks services.exe, i do scans of multiple programs and they all come
up clean, so i dont know what the problem is

 

[Malke]

the computer is clean its just that maybe there is some virus that
attacks services.exe, i do scans of multiple programs and they all come
up clean, so i dont know what the problem is

If the computer is really clean - and I see that you left out what antivirus
and other antimalware programs you used to determine this - then how could
you have a "virus that attacks services.exe"? Either the computer is
virus-free or it is not.

What is the fully qualified path to the services.exe file?If it is not in:
%systemroot%:\Windows\System32, then it is a trojan. If it is where it
belongs, then you need to determine what is causing the problem. Since you
mentioned problems with Visual Studio, perhaps that would be a good place
to start your troubleshooting.

You really haven't given us enough information about your system, what
changed between the time things worked and the time they didn't, and what
you've already done to troubleshoot for you to get a focused answer. Simply
replacing services.exe (which you might be able to do with the System File
Checker) probably will not solve your issues.

You might also try clean-boot troubleshooting to possibly see what is
causing the problems.

Clean boot in Windows XP - http://support.microsoft.com/kb/310353

Clean-boot advanced troubleshooting in Windows XP -
http://support.microsoft.com/kb/316434

How to Troubleshoot By Using the Msconfig Utility in Windows XP -
http://support.microsoft.com/?id=310560

Malke

 

[isaac2004]

i tried multiple antivirus and antispyware including windows removal
and the computer is clean. the trojan works like the sasser worm. i am
sure now it is a trojan because i noticed a csrss.exe process running
and low and behold, there is a file under C:/windows/csrss.exe. my
question is know how do i remove this, is there a tool that can help me
with this. thank you

 

[Rock]

i tried multiple antivirus and antispyware including windows removal
and the computer is clean. the trojan works like the sasser worm. i am
sure now it is a trojan because i noticed a csrss.exe process running
and low and behold, there is a file under C:/windows/csrss.exe. my
question is know how do i remove this, is there a tool that can help me
with this. thank you

You still haven't said what AV and anti-malware programs you have used.

Malware Removal
http://www.elephantboycomputers.com/page2.html#Removing_Malware

THE PARASITE FIGHT
Finding, Removing & Protecting Yourself From Scumware
http://aumha.org/a/parasite.htm

Richard Harper's Guide to Cleaning Pests
http://rgharper.mvps.org/cleanit.htm

 

[Malke]

i tried multiple antivirus and antispyware including windows removal
and the computer is clean. the trojan works like the sasser worm. i am
sure now it is a trojan because i noticed a csrss.exe process running
and low and behold, there is a file under C:/windows/csrss.exe. my
question is know how do i remove this, is there a tool that can help me
with this. thank you

I'm sorry, since you won't answer the questions I asked you I can't help
you. You still won't specifiy what you used and you didn't tell me the
fully qualified path of the services.exe. Csrss.exe is a legitimate Windows
file if it is in %systemroot%\Windows\Windows32. If it is anywhere else
then it is a trojan. However, if you are scanning with known antivirus and
antimalware apps, trojans using services.exe and csrss.exe would have been
found.

I already gave you a link to cleaning up your computer in my first post. If
you don't care to do this, then that's up to you but I really don't have
anything to add. You can always run HijackThis and post your log in one of
the specialty forums - *not* here in the MS newsgroups since you won't get
the time and attention you need for proper HJT log analyzing. Here are
links to HJT forums:

http://www.aumha.org/a/hjttutor.htm - HijackThis tutorial by Merijn
http://www.bleepingcomputer.com/forums/index.php?showtutorial=42 - another
tutorial
http://aumha.net/ - Click on the HijackThis forum. Read the announcement and
the stickies *first*.
http://www.atribune.org/forums/index.php?showforum=9
http://aumha.net/viewforum.php?f=30
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://spywarewarrior.com/viewforum.php?f=5
http://forums.techguy.org/54-security/
http://forums.tomcoyote.org/

I wish you success in solving your computer problems.

Malke