100% SERVICES.EXE cpu usage

[Guest]

i've tried everything! no matter what i do i can't stop services.exe from
using 100% of my cpu! and before anyone thinks of the word "spyware" i've
checked, checked again and then re-checked! i have an up to date virus scan
and firewall but there is still no stopping services.exe
i thought it might have been a virus that took that name but that would show
up on a virus scan wouldn't it?

 

[Dave Patrick]

Check Event Viewer and Device Manager for errors and or non-starting
devices.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| i've tried everything! no matter what i do i can't stop services.exe from
| using 100% of my cpu! and before anyone thinks of the word "spyware" i've
| checked, checked again and then re-checked! i have an up to date virus
scan
| and firewall but there is still no stopping services.exe
| i thought it might have been a virus that took that name but that would
show
| up on a virus scan wouldn't it?
|

 

[David H. Lipman]

Chris:

You may THINK you have checked you system but, there is a starting point and the below
ainstructions are that start. You may think your AV is up-to-date but my experinece
indicates this is NOT always the case. In fact, I just helped somone who stated their NAV
was up-to-date, but, they were still infected with several Trojans and two internet worms.
Especially since SERVICES.EXE is the name of the file used by Mydoom and Netsky Internet
worms and a couple of Downloader Trojans.

PLEASE humour me and and follow my below suggested instructions.


1) Download the following four items...

McAfee Stinger
http://vil.nai.com/vil/stinger/

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend Pattern File.
http://www.trendmicro.com/download/pattern.asp

Adaware SE (free personal version v1.05)
http://www.lavasoftusa.com/

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download Sysclean.com and place it in that directory.
Download the Trend Pattern File by obtaining the ZIP file.
For example; lpt271.zip

Extract the contents of the ZIP file and place the contents in the same directory as
sysclean.com.

2) Update Adaware with the latest definitions.
3) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
4) Reboot your PC into Safe Mode
5) Using Trend Sysclean, Stinger and Adaware, perform a Full Scan of your
platform and clean/delete any infectors/parasites found.
(a few cycles may be needed)
6) Restart your PC and perform a "final" Full Scan of your platform using the three
utilities; Trend Sysclean, Stinger and Adaware
7) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
8) Reboot your PC.
9) If you are using WinME or WinXP, create a new Restore point


* * * Please report your results ! * * *

Dave





| i've tried everything! no matter what i do i can't stop services.exe from
| using 100% of my cpu! and before anyone thinks of the word "spyware" i've
| checked, checked again and then re-checked! i have an up to date virus scan
| and firewall but there is still no stopping services.exe
| i thought it might have been a virus that took that name but that would show
| up on a virus scan wouldn't it?
|

 

[David H. Lipman]

Reference Thread:

"Virus that causes a lot of traffic ?"

Dave

 

[Rickard]

*i've tried everything! no matter what i do i can't stop services.ex
from
using 100% of my cpu! and before anyone thinks of the word "spyware
i've
checked, checked again and then re-checked! i have an up to dat
virus scan
and firewall but there is still no stopping services.exe
i thought it might have been a virus that took that name but tha
would show
up on a virus scan wouldn't it? *

Got the same symptoms on my Win 2000 server. Scanned with downloade
Panda and at Microsoft both claiming my PC was OK. Took a chance an
downloaded item 835732 (aginst Sabre) from Microsoft security an
changed all passwords on my accounts on the machine. And now it ha
been stable for 10 hours, normally it took about 1-2 hours for it t
get into the service.exe loop. Good Luck Rickar


-
Rickar

 

[Guest]

Got the same symptoms on my Win 2000 server. Scanned with downloaded
Panda and at Microsoft both claiming my PC was OK. Took a chance and
downloaded item 835732 (aginst Sabre) from Microsoft security and
changed all passwords on my accounts on the machine. And now it has
been stable for 10 hours, normally it took about 1-2 hours for it to
get into the service.exe loop. Good Luck Rickard

I have the same problem on my laptop and occurs in Windows XP pro sp2 and
Windows XP 64-bit edition. I have searched Microsofts knowledge base and all
I could find related to my problem was 3 links but all concerning Win2000
problems.
(http://support.microsoft.com/default.aspx?scid=kb;en-us;815349)
(http://support.microsoft.com/default.aspx?scid=kb;en-us;280802)
(http://support.microsoft.com/default.aspx?scid=kb;en-us;328885)

In my case I'm sure it isn't a virus/trojan/spyware problem. Since it occurs
after a fresh installation of Windows with no internet connection.