English | Deutsch


Is services.exe safe?

Services.exe is a executable file (a program) within Windows. The filename extension .exe denotes an executable file. You should only run executable files from publishers you trust, because executable files can potentially change your computer settings or harm your computer. The free file information forum can help you determine if services.exe is a virus, trojan, spyware, or adware that you can remove, or a file belonging to a Windows system or to an application you can trust.


Services.exe file information

The process known as Services and Controller app or Windows Services Control or sss or Transparent Proxy or Proxy Server or Anwendung für Dienste und Controller or Proxy Service (version 64 bit) or ceNKlBD^BVTtgwwVbvm3JhhGQoy1RASR[:GmKqTkS2XU aWCp58WRkE4EXas8LUhz0@S5@B_ afx;TNo B@XH F`k bRyWFn8p6

belongs to software Microsoft Windows Operating System or deb or Windows Services Control or Transparent Proxy or Proxy Server or Betriebssystem Microsoft Windows or Proxy Service (version 64 bit) or Transparent Proxy Server

by Microsoft (www.microsoft.com) or FileZilla Project (filezilla-project.org) or Transparent Proxy or AV Soft or TPS or NV Soft or Adobe System or lin.

Description: The original services.exe from Microsoft is an important part of Windows, but often causes problems. services.exe is located in the folder C:\Windows\System32. Known file sizes on Windows 7/XP are 108,032 bytes (42% of all occurrences), 108,544 bytes and 23 more variants. http://www.file.net/process/services.exe.html 
Services.exe is a Windows system file. The program is not visible. The file is a Microsoft signed file. Therefore the technical security rating is 6% dangerous, however also read the users reviews.

Recommended: Identify services.exe related errors

Viruses with the same file name

Is services.exe a virus? No, it is not. The true services.exe file is a safe Microsoft Windows system process, called "Services and Controller app". However, writers of malware programs, such as viruses, worms, and trojans deliberately give their processes the same file name to escape detection. Viruses with the same file name are for example Trojan:Win32/Puzlice.A or Worm:Win32/VB.BW (detected by Microsoft), and Trojan-Spy.Win32.VB.bwm or Trojan.Win32.Cossta.bnq (detected by Kaspersky).
To ensure that no rogue services.exe is running on your PC, click here to run a Free Malware Scan.

How to recognize suspicious variants? If services.exe is located in the folder C:\Windows, the security rating is 89% dangerous. The file size is 350,764 bytes (22% of all occurrences), 351,276 bytes and 191 more variants. It is not a Windows system file. There is no file information. The program has no visible window. It is an unknown file in the Windows folder. The program listens for or sends data on open ports to a LAN or the Internet. Services.exe is able to monitor applications, hide itself, record inputs and manipulate other programs.

If services.exe is located in a subfolder of C:\Windows, the security rating is 84% dangerous. The file size is 15,872 bytes (10% of all occurrences), 55,390 bytes and 109 more variants. The services.exe file is not a Windows system file. The program is not visible. Services.exe is an unknown file in the Windows folder. There is no description of the program. The software starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, C:\Windows\win.ini, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices, HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders). Services.exe is able to monitor applications, manipulate other programs and hide itself.

If services.exe is located in a subfolder of C:\Windows\System32, the security rating is 77% dangerous. The file size is 215,713 bytes (13% of all occurrences), 90,112 bytes and 61 more variants.

If services.exe is located in the folder C:\Windows\System32\drivers, the security rating is 79% dangerous. The file size is 546,816 bytes (44% of all occurrences), 445,353 bytes and 27 more variants.

If services.exe is located in a subfolder of "C:\Documents and Settings", the security rating is 64% dangerous. The file size is 64,156 bytes (9% of all occurrences), 37,888 bytes and 38 more variants.

If services.exe is located in a subfolder of "C:\Program Files", the security rating is 61% dangerous. The file size is 251,874 bytes (10% of all occurrences), 708,555 bytes and 34 more variants.

If services.exe is located in the folder "C:\Program Files\Common Files", the security rating is 56% dangerous. The file size is 40,960 bytes.

If services.exe is located in a subfolder of C:\, the security rating is 69% dangerous. The file size is 272,384 bytes (12% of all occurrences), 798,490 bytes and 6 more variants.

If services.exe is located in a subfolder of C:\Windows\System32\drivers, the security rating is 72% dangerous. The file size is 53,760 bytes (50% of all occurrences), 20,992 bytes or 237,568 bytes.

If services.exe is located in a subfolder of "C:\Program Files\Common Files", the security rating is 79% dangerous. The file size is 1,180,680 bytes.

If services.exe is located in a subfolder of the "My Files" folder, the security rating is 69% dangerous. The file size is 1,112,576 bytes (50% of all occurrences) or 64,156 bytes.

If services.exe is located in the folder "C:\Program Files", the security rating is 91% dangerous. The file size is 112,099 bytes.

If services.exe is located in the Windows Temp folder, the security rating is 56% dangerous. The file size is 27,652 bytes.

External information from Paul Collins:
There are different files with the same name:

  • "FriendlyTypeName" definitely not required. Added by the NEVEG.B or NEVEG.C WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "golumm" definitely not required. CoolWebSearch parasite variant. Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Microsoft Services" definitely not required. Added by the ALETS TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Microsoft Visual SourceSafe" definitely not required. Added by the NEVEG.B or NEVEG.C WORMS!. Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup or the Microsoft Visual SourceSafe program
  • "MSOffice" definitely not required.
  • "RPCserv32" definitely not required. Added by the MYDOOM.AL WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Service" definitely not required. Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
  • "Service" definitely not required. Added by the NETSKY or NETSKY.B WORMS! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Services" definitely not required. Added by a number of VIRUSES, WORMS and TROJANS! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
  • "Services Logon" definitely not required. Added by the CROWT.A WORM! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Services Process" definitely not required. Added by unidentified spyware - recognized by Kaspersky antivirus as Small.X TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "Services.EXE" definitely not required. Added by the KAZPING WORM! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
  • "sysinit" definitely not required. Added by the NEWLFRM-A TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!
  • "System Update2" definitely not required. Added by the AUTOTROJ-C TROJAN!
  • "Xpsystem" definitely not required. Added by the DAEMOZ.A TROJAN! Note - this is not the legitimate services.exe process which should NOT appear in Msconfig/Startup!
  • "xp_system" definitely not required. Added by the KREPPER-G TROJAN! Note - this is not the legitimate services.exe process, which should not appear in Msconfig/Startup!

Important: Some malware disguises itself as services.exe, particularly when not located in the C:\Windows\System32 folder. Therefore, you should check the services.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.



Score

User Comments

Look if you download a hacks or its over 70% that is a virus you know worms trojan etc, if you cant load google , youtube facebook etc its virus or you dont have a network but if its says web blocked 100% virus i had a virus Worms :) so i know how to remove it go to C:\WINDOWS\system32\drivers\etca and remove services of virus
  Oussama  
This popped up on AVG as a trojan after a long day of recovering my buddy's laptop. Long story short, update your computers people.
  Joel  
found to be lagging my pc very hard. once i deleted it from task manager it stopped the lag completely. very weird.
  Ricky  
The services.exe file is a part of the Microsoft Windows Operating System which manages the operation of starting and stopping services. It also deals with the automatic starting of services during the computers boot-up and the stopping of services during shut-down. This program is important for the stable and secure running of your computer and should not be terminated. services.exe should be located in %SystemRoot%\System32, if instances occur elsewhere they may be viruses, trojans or other malware. If this file infected it can be replaced with a clean system copy by using the Microsoft System File Checker, see below for instructions. 1. Go to Start All Programs Accessories. 2. Right click on Command Prompt. For Windows XP: Choose Open. For Windows 7/ Vista: Choose Run as Administrator. 3. On your Command Prompt window, type in: For Windows XP: sfc /scannow For Windows 7/ Vista: sfc /scanfile=C:\windows\system32\services.exe 4. Press Enter. The result will be shown and it should also say it needs a restart. 5. Restart the computer for the file to be replaced. Run an AV scan to confirm the services.exe file is now clean. You may need access to your OS installation discs to run the MS system file checker.
  Lee  
It's a trojan, try using HijackThis Open the Misc Tools section Open Process Manager then kill process c:\windows\services.exe then go to C:\WINDOWS and manual delete services.exe Restart and that's all
  KenEzthex  
i tried to delete it and couldn't delete it, it would not let me. I restarted my computer and now windows will not boot up i get the blue screen of death every time and it resets.
  david P  
Run ESET Online scanner immediately. Then Run tdsskiller. Then Run Malwarebytes Malware removal tool. Once you have finished, clean and defrag registry. These are all free and will remove 99% of viruses,malware and rootkits. Services.exe is required and can't be removed it the virus replaces the original file,then your anti virus removes it, and allmost instantly the virus will reinstate it and the cycle begins.
  Donmega  
The file itself is not dangerous. It is a standard part of windows. However I just removed a virus that patched system32\services.exe called Trojan Patched c.LYU. Just get a new services.exe file, and replace it. If you can not delete the original file, then rename it, then copy the new one, then delete the renamed one. Please remember to back up before you edit anything.
  Dean Tuffey  
More comments can be found here:
    (further information)

Rating chart

Summary: Average user rating of services.exe: based on 278 votes with 9 reviews.
67 users think services.exe is essential for Windows or an installed application. 8 users think it's probably harmless. 36 users think it's neither essential nor dangerous. 29 users suspect danger. 138 users think services.exe is dangerous and recommend removing it. 42 users don't grade services.exe ("not sure about it").


Do you have additional information?
What do you know about services.exe: 
How do you rate it: 
Link for more info's: 
Your Name: 


Services scanner


Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.


Other processes


services.exe [all]