Services.exe

[TexBear]

Hi, I'm not sure if I should be posting a problem I'm having with my WinXP
Home computer but here goes.

My microsoft antispyware stopped a "C:Windows\services.exe" from making
changes. Now I'm undder the impression that this particular file is
supposed to be located in the system32 folder so I checked that and found
that it is still there but why is the file also located in C:Windows? I
also noticed the file size there is 7kb as compared to the one in system32
as 106kb.

After running scans from Microsoft spyware, Adware, Spybot, Spysweeper,
CWshredder. etc. in both Safe and standard modes, I have had zero threats.
Next, I back up a copy of this 7kb file and when I tried to delete it, it
won't. So I changed the file extension over to .bak. The antispyware
stopped the warning pop-up and things seems to be working fine. When I
restarted the computer, this pesky file came back and the antispyware
program stopped it again.

Figuring that there might be a registry change in the "Run" keys that is
making the unwanted startup, but could not find any key of the sort that is
related to this dagnabbit little file. Checked with Msconfig, no luck. Well,
as long I don't reboot my computer, things are running smoothly as a baby's
butt but don't want to stay this way.

Any other suggestions you might have for me, I'd be much obliged for your
help!

TexBear

 

[TexBear]

I've neglected to mention that I had also scan for viruses with no luck.
However further investigating on the antispyware popup screen reveals that
this file might be a possible trojan.

 

[John E. Carty]

Sounds like it may be the win32.raleka worm:
http://vil.nai.com/vil/content/v_100574.htm

 

[Bob I]

www.Google.com had this

http://www.neuber.com/taskmanager/process/services.exe.html

 

[TexBear]

Thought I'd let you know that I found that a Trojan program created the
services.exe file in windows root folder. The program is called
Trojan.Anits. See the link below for more info.

http://securityresponse.symantec.com/avcenter/venc/data/trojan.anits.html

Since I keep my virus def files up to date regular with Norton, I'd think
that Norton would catch it in time before the trojan gets executed but it
didn't. Any thoughts on this?

By the way, fellas, thanks for your help..

Texbear

 

[MowGreen [MVP]]

Texbear,

NAV is, IMHO, worthless and a security risk since it's installed on so
many OEM systems. Users think that they are now protected and never seek
updates, renew their subscription, scan the system, etc. One then has to
pay extra for detection definitions that will remove " undesirable "
software ... i.e. spy|ad|malware. And, as in your case, it did not even
protect you from a known Trojan that they have identified.
Peter Norton must be puking somewhere ...

MowGreen [MVP 2004-2005]
Windows Server - Software Distribution
Windows - Security

... In memory of our dear friend, the quintessential MVP, Alex Nichol ..
.......................... 1935- 2005 ............................

 

[TexBear]

Thanks for your opinion..

For many years, I've used Norton programs, am still using NAV 2003 and
never have I had a problem with infections until just recently. I've read
posts in here as well as in other newsgroups regarding the newer Norton
programs 2004 & up and there were quite a few thumbs down thoughts on Peter
Norton..

Well, I reckon its time for me to start looking for a more reliable
Anti-Virus program. Any ideas on a good one, anyone?

Much obliged..

TexBear

Texbear,

NAV is, IMHO, worthless and a security risk since it's installed on so
many OEM systems. Users think that they are now protected and never seek
updates, renew their subscription, scan the system, etc. One then has to
pay extra for detection definitions that will remove " undesirable "
software ... i.e. spy|ad|malware. And, as in your case, it did not even
protect you from a known Trojan that they have identified.
Peter Norton must be puking somewhere ...

MowGreen [MVP 2004-2005]
Windows Server - Software Distribution
Windows - Security

.. In memory of our dear friend, the quintessential MVP, Alex Nichol ..
......................... 1935- 2005 ............................

Thought I'd let you know that I found that a Trojan program created the
services.exe file in windows root folder. The program is called
Trojan.Anits. See the link below for more info.

http://securityresponse.symantec.com/avcenter/venc/data/trojan.anits.html

Since I keep my virus def files up to date regular with Norton, I'd think
that Norton would catch it in time before the trojan gets executed but it
didn't. Any thoughts on this?

By the way, fellas, thanks for your help..

Texbear

 

[R. McCarty]

Back in the fall of 2004, I starting testing Anti-Virus software to
replace Nav. There are a number of good choices, that provide
good coverage. I needed a new vendor to recommend to my
customers and finally decided on Computer Associates eTrust.
I chose it because it has a lean system footprint, cost is affordable
and the yearly subscription costs are no where as expensive as
Symantec's. It also performs daily definition updates, which are
quick and usually very small in size.
Microsoft offers a 1-Year free subscription via it's Partner Pack.
It's an older version, so after installing you'll need to upgrade to
version 7.0
As far as other options both Kaspersky & Panda are good but
fairly expensive. If you're looking for free Anti-Virus both AVG
and AVAST are OK. AVG is easier to configure/use and AVAST
tends to offer more functionality.
After years of Corporate use of McAfee, I still cannot recommend
their products because of it's past history of causing more issues
than it resolves. But I frequently read articles and postings that they
are trying to improve. (Which I don't think applies to Symantec).

What you might do is image your machine and download some of
the trials and see how they meet your requirements.

The eTrust download, via MS Partner Pack is found here:
http://www.microsoft.com/windows/partnerpack/default.aspx?prereq=true

Thanks for your opinion..

For many years, I've used Norton programs, am still using NAV 2003 and
never have I had a problem with infections until just recently. I've read
posts in here as well as in other newsgroups regarding the newer Norton
programs 2004 & up and there were quite a few thumbs down thoughts on
Peter Norton..

Well, I reckon its time for me to start looking for a more reliable
Anti-Virus program. Any ideas on a good one, anyone?

Much obliged..

TexBear

Texbear,

NAV is, IMHO, worthless and a security risk since it's installed on so
many OEM systems. Users think that they are now protected and never seek
updates, renew their subscription, scan the system, etc. One then has to
pay extra for detection definitions that will remove " undesirable "
software ... i.e. spy|ad|malware. And, as in your case, it did not even
protect you from a known Trojan that they have identified.
Peter Norton must be puking somewhere ...

MowGreen [MVP 2004-2005]
Windows Server - Software Distribution
Windows - Security

.. In memory of our dear friend, the quintessential MVP, Alex Nichol ..
......................... 1935- 2005 ............................

Thought I'd let you know that I found that a Trojan program created the
services.exe file in windows root folder. The program is called
Trojan.Anits. See the link below for more info.

http://securityresponse.symantec.com/avcenter/venc/data/trojan.anits.html

Since I keep my virus def files up to date regular with Norton, I'd
think that Norton would catch it in time before the trojan gets executed
but it didn't. Any thoughts on this?

By the way, fellas, thanks for your help..

Texbear