services.exe

I have been getting a services.exe trying to access the
net but my firewall has been blocking the connection.

This has only been happening since 9th Aug.
is this a microsoft file as I recently updated from the
microsoft site.

Any help would be greatly appreciated

Will

Will,

The Win Me operating system has no file named services.exe and is almost
certainly malicious.

If you haven't already done so I would strongly recommend that you check
your system for possible viruses using your preferred anti virus
application equipped with an updated set of viral signatures. However you
might first want to check your PC using one of the online virus checks
such as McAfee's online checker
(http://us.mcafee.com/root/mfs/default.asp) or Trend Micro's Housecall
(http://housecall.antivirus.com).

This would be a good time to download yourself a copy of the free Ad-Aware
SE Personal edition from Lavasoft
(http://www.lavasoftusa.com/software/adaware/) and also SpyBot Search &
Destroy 1.3 (http://www.safer-networking.org/) and use them to check your
system for other commercial parasites remembering that they are only as
good as when you last updated their reference files. I also use a program
called BHODemon (http://www.definitivesolutions.com/bhodemon.htm) that
checks for unwanted Browser Help Objects and SpywareBlaster
(http://www.wilderssecurity.net/spywareblaster.html) which can help
prevent some parasites getting a grip on your PC.

Just is case the problem is due to a new version of the CoolWebSearch
parasite you might want to download and run the CWShredder which targets
that specific parasite. Unfortunately neither AdAware or SpyBot seem to be
able as yet to fully detect all the various versions of the CoolWebSearch
parasite as it keeps changing. For more details of the CoolWebSearch
parasite see http://www.spywareinfo.com/~merijn/cwschronicles.html and
also http://www.pestpatrol.com/pestinfo/c/cws.asp.

CWShredder, merijn's removal tool, can be downloaded from
http://www.spywareinfo.com/~merijn/files/cwshredder.zip

Finally if you still continue to experience problems download a copy of
HijackThis from (http://www.spywareinfo.com/~merijn/downloads.html).
Create a folder called HJT on C: (not on your desktop nor in your temp
folder) and copy the file you downloaded to that folder. Close as many
applications as you can including all instances of Internet Explorer.
Enable Explorer to see all files and folders (Tools | Folder Options |
View and check "Show hidden files and folders" and uncheck "Hide protected
operating system files") and then run hijackthis.exe and post back the log
to either the HijackThis Forum at http://forums.spywareinfo.com/ or
alternatively http://forum.aumha.org/viewforum.php?f=30 and hopefully this
will enable someone to identify the cause of your problem.

See also: Dealing with Unwanted Malware, Parasites, Toolbars and Search
Engines http://mvps.org/winhelp2002/unwanted.htm and also Browser
Hijacking http://www.spywareinfo.com/articles/hijacked/
--?
Mike Maltby


..
Will wrote:

I have been getting a services.exe trying to access the
net but my firewall has been blocking the connection.

This has only been happening since 9th Aug.
is this a microsoft file as I recently updated from the
microsoft site.

Any help would be greatly appreciated

Will