services.exe
Services and Controller app by Microsoft
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Warning 35 antivirus scanners has detected malware in various versions of services.exe.
Overview
services.exe has 16 known versions, the most recent one is 6.2.9200.16384 (win8_rtm.120725-1247). It is started as a Windows Service called 'Plug and Play' with the name 'PlugPlay' and described as “Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). This is executed as a shared service (which simply means that this service can share a process with other Win32 services). The average file size is about 235.78 KB. During the process's lifecycle, the typical CPU resource utilization is about 0.0037% including both foreground and background operations, the average private memory consumption is about 6.68 MB with the maximum memory reaching around 10.32 MB. Addionally, typically read and write I/O disk operations is about 8.46 KB per minute for reads and 23.48 KB per minute for writes.
What is services.exe?
Service Control Manager (SCM) is a special system process which starts, stops and interacts with Windows service processes. The SCM executable, Services.exe, runs as a Windows console program, and is launched by the Wininit process early during the system startup.
 Details
|
| File name: | services.exe |
| Publisher: | Microsoft Corporation |
| Product name: | Services and Controller app |
| Description: | Microsoft® Windows® Operating System |
| Typical file path: | C:\Windows\System32\services.exe |
| Original name: | services.exe.mui |
| Windows Service |
| Service name: | PlugPlay |
| Display name: | Plug and Play |
| Description: | “Enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.” |
| Type: | Win32ShareProcess |
Behaviors
(Note, the behaviors below are for all versions of services.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' as a shared service by the Service Host (svchost.exe)
- 'PlugPlay' (Plug and Play)
- 'Eventlog' (Event Log)
Malware detections
Based on 40+ industry antivirus scanners, 35 of them detected the following malware.
All file variations of services.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
49.00% |
|
| Windows 7 Ultimate |
29.25% |
|
| Windows 7 Professional |
10.00% |
|
| Windows Vista Home Premium |
4.00% |
|
| Windows 7 Home Basic |
3.00% |
|
| Windows 7 Starter |
0.75% |
|
| Windows 8 Pro |
0.75% |
|
| Windows 7 Enterprise |
0.75% |
|
| Windows Seven Black Edition |
0.50% |
|
| Windows Vista Home Basic |
0.50% |
|
| Windows Vista Ultimate |
0.50% |
|
| Windows Se7en Titan |
0.25% |
|
| Windows 8 Pro with Media Center |
0.25% |
|
| Windows Vista Business |
0.25% |
|
| Windows 8 |
0.25% |
|
Distribution by country
United States installs about 39.65% of Services and Controller app.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
21.60% |
|
| Hewlett-Packard |
17.32% |
|
| ASUS |
17.13% |
|
| Acer |
12.85% |
|
| Toshiba |
9.31% |
|
| Sony |
6.33% |
|
| Lenovo |
4.10% |
|
| GIGABYTE |
2.79% |
|
| Samsung |
2.05% |
|
| Intel |
1.86% |
|
| MSI |
1.12% |
|
| Alienware |
0.74% |
|
| Medion |
0.74% |
|
| American Megatrends |
0.56% |
|
| Sahara |
0.37% |
|
| Gateway |
0.37% |
|
| NEC |
0.37% |
|
| Compaq |
0.37% |
|
