sevices.exe ( right under services.exe)

[bil]

We experienced a days worth of ARP spoofing last week, and finally
traced it to an XP box running 'sevices.exe' -- it appeared right
under 'services.exe' in task manager.

As soon as we ended it, the spoofing stopped.

Does anyone know where this comes from? We've searched security /
antivirus sites, but we just come up with misspellings of 'services'.

Any ideas, references, appreciated...

 

[Lanwench [MVP - Exchange]]

We experienced a days worth of ARP spoofing last week, and finally
traced it to an XP box running 'sevices.exe' -- it appeared right
under 'services.exe' in task manager.

As soon as we ended it, the spoofing stopped.

Does anyone know where this comes from? We've searched security /
antivirus sites, but we just come up with misspellings of 'services'.

Any ideas, references, appreciated...

I'd disconnect this box from the network ASAP, and run various
anti-malware/antivirus tools against it -

http://www.elephantboycomputers.com/page2.html#Viruses_Malware is a good
place to start. I'd use David Lipman's Multi-AV.

The rest of your computers may also need some attention - got any
centrally-managed antivirus on your network?