English | Deutsch


How to remove an services error


The free file information forum can help you determine if services.exe is a virus, trojan, spyware, or adware that you can remove, or a file belonging to a Windows system or an application you can trust.

Click to Run a Free Scan for services.exe related errors


Services.exe file information

The process known as Services and Controller app or Windows Services Control or sss or Transparent Proxy or Proxy Server or Anwendung für Dienste und Controller or Proxy Service (version 64 bit) or ceNKlBD^BVTtgwwVbvm3JhhGQoy1RASR[:GmKqTkS2XU aWCp58WRkE4EXas8LUhz0@S5@B_ afx;TNo B@XH F`k bRyWFn8p6

belongs to software Microsoft Windows Operating System or deb or Windows Services Control or Transparent Proxy or Proxy Server or Betriebssystem Microsoft Windows or Proxy Service (version 64 bit) or Transparent Proxy Server

by Microsoft (www.microsoft.com) or FileZilla Project (filezilla-project.org) or Transparent Proxy or AV Soft or TPS or NV Soft or Adobe System or lin.

Description: services.exe is located in the folder C:\Windows\System32. Known file sizes on Windows 7/XP are 108,032 bytes (44% of all occurrences), 108,544 bytes and 23 more variants. http://www.file.net/process/services.exe.html 
Services.exe is a Windows system file. The program is not visible. The file is a Microsoft signed file. Therefore the technical security rating is 6% dangerous, however also read the users reviews.

Recommended: Identify services.exe related errors

Viruses with the same file name

Is services.exe a virus? No, it is not. The true services.exe file is a safe Microsoft Windows system process, called "Services and Controller app". However, writers of malware programs, such as viruses, worms, and trojans deliberately give their processes the same file name to escape detection. Viruses with the same file name are for example Trojan:Win32/Puzlice.A or Worm:Win32/VB.BW (detected by Microsoft), and Trojan-Spy.Win32.VB.bwm or Trojan.Win32.Cossta.bnq (detected by Kaspersky).
To ensure that no rogue services.exe is running on your PC, click here to run a Free Malware Scan.

How to recognize suspicious variants? If services.exe is located in the folder C:\Windows, the security rating is 89% dangerous. The file size is 350,764 bytes (22% of all occurrences), 351,276 bytes and 190 more variants. It is not a Windows system file. There is no file information. The program has no visible window. It is an unknown file in the Windows folder. The program listens for or sends data on open ports to a LAN or the Internet. services.exe is able to monitor applications, hide itself, record inputs and manipulate other programs.

If services.exe is located in a subfolder of C:\Windows, the security rating is 84% dangerous. The file size is 15,872 bytes (10% of all occurrences), 55,390 bytes and 107 more variants. File services.exe is not a Windows system file. The program is not visible. Services.exe is an unknown file in the Windows folder. There is no description of the program. Program starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, C:\Windows\win.ini, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). services.exe is able to monitor applications, manipulate other programs and hide itself.

If services.exe is located in a subfolder of C:\Windows\System32, the security rating is 77% dangerous. The file size is 215,713 bytes (13% of all occurrences), 90,112 bytes and 61 more variants.

If services.exe is located in the folder C:\Windows\System32\drivers, the security rating is 79% dangerous. The file size is 546,816 bytes (44% of all occurrences), 445,353 bytes and 27 more variants.

If services.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 64% dangerous. The file size is 64,156 bytes (9% of all occurrences), 37,888 bytes and 38 more variants.

If services.exe is located in a subfolder of "C:\Program Files", the security rating is 61% dangerous. The file size is 251,874 bytes (10% of all occurrences), 708,555 bytes and 34 more variants.

If services.exe is located in the folder "C:\Program Files\Common Files", the security rating is 56% dangerous. The file size is 40,960 bytes.

If services.exe is located in a subfolder of C:\Windows\System32\drivers, the security rating is 72% dangerous. The file size is 53,760 bytes (50% of all occurrences), 20,992 bytes or 237,568 bytes.

If services.exe is located in a subfolder of C:\, the security rating is 72% dangerous. The file size is 272,384 bytes (14% of all occurrences), 798,490 bytes and 5 more variants.

If services.exe is located in a subfolder of "C:\Program Files\Common Files", the security rating is 79% dangerous. The file size is 1,180,680 bytes.

If services.exe is located in the folder "C:\Program Files", the security rating is 91% dangerous. The file size is 112,099 bytes.

If services.exe is located in the Windows Temp folder, the security rating is 56% dangerous. The file size is 27,652 bytes.

If services.exe is located in a subfolder of the "My Files" folder, the security rating is 74% dangerous. The file size is 64,156 bytes.

External information from Paul Collins:
There are different files with the same name:

  • "FriendlyTypeName" definitely not required. Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "golumm" definitely not required. CoolWebSearch parasite variant. Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Microsoft Services" definitely not required. Added by the ALETS TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Microsoft Visual SourceSafe" definitely not required. Added by the NEVEG.B or NEVEG.C WORMS!. Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup or the Microsoft Visual SourceSafe program
  • "MSOffice" definitely not required.
  • "RPCserv32" definitely not required. Added by the MYDOOM.AL WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Service" definitely not required. Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
  • "Service" definitely not required. Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Services" definitely not required. Added by a number of VIRUSES, WORMS and TROJANS! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
  • "Services Logon" definitely not required. Added by the CROWT.A WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Services Process" definitely not required. Added by unidentified spyware - recognized by Kaspersky antivirus as Small.X TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Services.EXE" definitely not required. Added by the KAZPING WORM! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
  • "sysinit" definitely not required. Added by the NEWLFRM-A TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "System Update2" definitely not required. Added by the AUTOTROJ-C TROJAN!
  • "Xpsystem" definitely not required. Added by the DAEMOZ.A TROJAN! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
  • "xp_system" definitely not required. Added by the KREPPER-G TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!

Important: Some malware camouflages itself as services.exe, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the services.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.



Score

User Comments

It's a trojan, try using HijackThis Open the Misc Tools section Open Process Manager then kill process c:\windows\services.exe then go to C:\WINDOWS and manual delete services.exe Restart and that's all
  KenEzthex  
i tried to delete it and couldn't delete it, it would not let me. I restarted my computer and now windows will not boot up i get the blue screen of death every time and it resets.
  david P  
Run ESET Online scanner immediately. Then Run tdsskiller. Then Run Malwarebytes Malware removal tool. Once you have finished, clean and defrag registry. These are all free and will remove 99% of viruses,malware and rootkits. Services.exe is required and can't be removed it the virus replaces the original file,then your anti virus removes it, and allmost instantly the virus will reinstate it and the cycle begins.
  Donmega  
The file itself is not dangerous. It is a standard part of windows. However I just removed a virus that patched system32\services.exe called Trojan Patched c.LYU. Just get a new services.exe file, and replace it. If you can not delete the original file, then rename it, then copy the new one, then delete the renamed one. Please remember to back up before you edit anything.
  Dean Tuffey  
Even if inside System32 can still be virus. But Windows still recognises as a system file which it should. Can cause serious issues if the System32 Services.exe gets infected. watch out.
  Oscar  
easy to get rid of go to view hidden folders go to C/documents settings you Application data it will be there as service/service.exe rename it then use a programme to romove it your comp will restart automatically because thats the nature of the virus but will be unable to start due to the renaming of the virus then use a reg clean to remove any bits left i find ccleaner great
  mike  
There is a trojan svcs.exe that copies itself into c:\Windows or c:\Windows\System32. Rating on it in either case is high. The trojan works as a worm infesting your temp files with tracking cookies that over rides ping.exe at the same time loading down your hard drive like a worm. It also takes over other services driving your CPU to 100%. IF not found right away it could seriously damage your computer. Sense it hides as a Windows service most antiviruses won't catch it. Only known one that works is Webroot.
  Grey Hatter  
Do NOT Delete System 32 or any thing in it, your computer will not boot because system 32 is valuable in the ENTIRE system. IF someone tells you to delete system 32, someones been trolling.
  12stringwizard  
More comments can be found here:
    (further information)
Rating chart


Summary: Average user rating of services.exe: based on 274 votes with 9 reviews.
67 users think services.exe is essential for Windows or an installed application. 8 users think it's probably harmless. 34 users think it's neither essential nor dangerous. 29 users suspect danger. 136 users think services.exe is dangerous and recommend removing it. 41 users doesn't grade services.exe ("not sure about it").


Do you have additional information?
What do you know about services.exe: 
How do you rate it: 
Link for more info's: 
Your Name: 


Services scanner


Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.


Other processes


services.exe [all]