VersionsVersions

6.2.9200.16384 (win8_rtm.120725-1247) 0.57%
6.2.9200.16384 (win8_rtm.120725-1247) 0.60%
6.2.9200.16384 (win8_rtm.120725-1247) 1.14%
6.2.9200.16384 (win8_rtm.120725-1247) 9.23%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.07%
6.2.8400.0 (winmain_win8rc.120518-1423) 0.07%
6.2.8250.0 (winmain_win8beta.120217-1520) 0.03%
6.2.8102.0 (winmain_win8m3.110823-1455) 0.07%
6.1.7600.16385 (win7_rtm.090713-1255) 17.05%
6.1.7600.16385 (win7_rtm.090713-1255) 30.70%
6.0.6000.16386 (vista_rtm.061101-2205) 4.63%
6.0.6000.16386 (vista_rtm.061101-2205) 0.03%
6.0.6000.16386 (vista_rtm.061101-2205) 0.30%
6.0.6000.16386 (vista_rtm.061101-2205) 1.04%
6.0.6000.16386 (vista_rtm.061101-2205) 0.30%
6.0.6000.16386 (vista_rtm.061101-2205) 0.03%
5.2.3790.4455 (srv03_sp2_gdr.090203-1205) 0.03%
5.2.3790.4455 (srv03_sp2_gdr.090203-1205) 0.03%
5.2.3790.3959 (srv03_sp2_rtm.070216-1710) 0.03%
5.1.2600.5922 (xpsp_sp3_qfe.091223-1723) 1.17%
5.1.2600.5755 (xpsp_sp3_qfe.090206-1316) 0.13%
5.1.2600.5755 (xpsp_sp3_qfe.090206-1316) 1.34%
5.1.2600.5755 (xpsp_sp3_qfe.090206-1316) 0.23%
5.1.2600.5755 (xpsp_sp3_qfe.090206-1316) 0.44%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 20.23%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 0.94%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 0.13%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 0.84%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 0.13%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 0.03%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 0.03%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 0.03%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 0.23%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 0.44%
5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 0.44%
5.1.2600.5512 (xpsp.080413-2111) 1.54%
5.1.2600.5512 (xpsp.080413-2111) 0.13%
5.1.2600.5512 (xpsp.080413-2111) 0.13%
5.1.2600.3520 (xpsp_sp2_qfe.090206-1239) 0.20%
5.1.2600.3520 (xpsp_sp2_qfe.090206-1239) 0.03%
5.1.2600.3520 (xpsp_sp2_gdr.090206-1233) 1.04%
5.1.2600.3520 (xpsp_sp2_gdr.090206-1233) 0.03%
5.1.2600.3520 (xpsp_sp2_gdr.090206-1233) 0.03%
5.1.2600.3311 (xpsp.080212-0005) 0.03%
5.1.2600.3300 (xpsp.080125-2028) 0.03%
5.1.2600.3244 (xpsp.071030-1537) 0.03%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 3.89%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.03%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) 0.03%

Relationships

services.exe

Services and Controller app by Microsoft

Remove services.exe
This is a Windows system installed file with Windows File Protection (WFP) enabled.
Warning 37 antivirus scanners has detected malware in various versions of services.exe.

Overview

There are 49 versions of services.exe in the wild, the latest version being 6.2.9200.16384 (win8_rtm.120725-1247). services.exe is run as a standard windows process in the context of the SYSTEM account with extensive privileges. The average file size is about 184.21 KB. During the process's lifecycle, the typical CPU resource utilization is about 0.0051% including both foreground and background operations, the average private memory consumption is about 6.34 MB with the maximum memory reaching around 10.05 MB. Addionally, typically read and write I/O disk operations is about 9.66 KB per minute for reads and 23.7 KB per minute for writes.

What is services.exe?

Service Control Manager (SCM) is a special system process which starts, stops and interacts with Windows service processes. The SCM executable, Services.exe, runs as a Windows console program, and is launched by the Wininit process early during the system startup.

DetailsDetails

File name:services.exe
Publisher:Microsoft Corporation
Product name:Services and Controller app
Description:Microsoft® Windows® Operating System
Typical file path:C:\Windows\System32\services.exe
Original name:services.exe.mui

MalwareMalware detections

Based on 40+ industry antivirus scanners, 37 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
Avira AntiVir 7.11.87.208 W32/Patched.UB 6.0.6000.16386 (vista_rtm.061101-2205)
Antiy Labs AVL 2.0.3.7 Virus/Win32.ZAccess.gen 6.0.6000.16386 (vista_rtm.061101-2205)
avast! 8.0.1489.320 Win32:Sirefef-AII [Rtk] 6.0.6000.16386 (vista_rtm.061101-2205)
AVG 2014.0.3629 Patched_c.LYT 6.0.6000.16386 (vista_rtm.061101-2205)
BitDefender 7.2 Trojan.Patched.Sirefef.C 6.0.6000.16386 (vista_rtm.061101-2205)
Clam AntiVirus 0.97.3.0 Trojan.Zeroaccess-496 6.0.6000.16386 (vista_rtm.061101-2205)
Commtouch 5.4.1.7 W32/Backdoor.NKMQ-3542 6.0.6000.16386 (vista_rtm.061101-2205)
Comodo Internet Security 16515 UnclassifiedMalware 6.0.6000.16386 (vista_rtm.061101-2205)
Dr.Web 8.13.6.16 BackDoor.Maxplus.5220 6.0.6000.16386 (vista_rtm.061101-2205)
Emsisoft Anti-Malware 3.0.0.583 Trojan.Patched.Sirefef.C (B) 6.0.6000.16386 (vista_rtm.061101-2205)
eSafe 7.0.17.0 Win32.Banker 5.1.2600.5512 (xpsp.080413-2111)
eSafe 7.0.17.0 Win32.Trojan 6.0.6000.16386 (vista_rtm.061101-2205)
eSafe 7.0.17.0 Win32.TrojanHorse 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)
ESET NOD32 7.8505 Win32/Sirefef.FB.Gen 6.0.6000.16386 (vista_rtm.061101-2205)
Fortinet 5.1.146.0 W32/ZAccInf.B!tr 6.0.6000.16386 (vista_rtm.061101-2205)
F-Secure 11.0.19100.45 Virus:W32/ZeroAccess.B 6.0.6000.16386 (vista_rtm.061101-2205)
G Data 13.6.22 Trojan.Patched.Sirefef.C 6.0.6000.16386 (vista_rtm.061101-2205)
Ikarus T3.1.4.3.0 Trojan.Patched_c 6.0.6000.16386 (vista_rtm.061101-2205)
K7 AntiVirus 9.170.8927 Trojan 6.0.6000.16386 (vista_rtm.061101-2205)
K7GW 12.7.0.12 Trojan 6.0.6000.16386 (vista_rtm.061101-2205)
Kaspersky 9.0.0.837 Virus.Win32.ZAccess.m 6.0.6000.16386 (vista_rtm.061101-2205)
Malwarebytes 1.75.0.1 Rootkit.0Access 6.0.6000.16386 (vista_rtm.061101-2205)
McAfee 5.400.1158 ZeroAccess.ds.gen.c 6.0.6000.16386 (vista_rtm.061101-2205)
McAfee Gateway Anti-Malware v2013-dat ZeroAccess.ds.gen.c 6.0.6000.16386 (vista_rtm.061101-2205)
Microsoft Security Essentials 1.9607.0 Virus:Win32/Sirefef.R 6.0.6000.16386 (vista_rtm.061101-2205)
eScan by MicroWorld 12.0.250.0 Trojan.Patched.Sirefef.C 6.0.6000.16386 (vista_rtm.061101-2205)
Norman 7.01.04 ZAccInf.A 6.0.6000.16386 (vista_rtm.061101-2205)
Panda Antivirus 10.0.3.5 W32/SirefefP 6.0.6000.16386 (vista_rtm.061101-2205)
PC Tools 9.0.0.2 Trojan.Zeroaccess 6.0.6000.16386 (vista_rtm.061101-2205)
Sophos 4.90.0 Troj/ZAccInf-B 6.0.6000.16386 (vista_rtm.061101-2205)
Symantec 20131.1.0.101 Trojan.Zeroaccess!inf 6.0.6000.16386 (vista_rtm.061101-2205)
The Hacker None Trojan/Sirefef.FB.gen 6.0.6000.16386 (vista_rtm.061101-2205)
Total Defense 37.0.10487 Win32/Sirefef!patched 6.0.6000.16386 (vista_rtm.061101-2205)
Trend Micro 9.740.0.1012 Mal_Siref32 6.0.6000.16386 (vista_rtm.061101-2205)
Trend Micro HouseCall 9.700.0.1001 Mal_Siref32 6.0.6000.16386 (vista_rtm.061101-2205)
VIPRE Antivirus 19140 Virus.Win32.Sirefef.r (v) 6.0.6000.16386 (vista_rtm.061101-2205)
ViRobot 2011.4.7.4223 Win32.ZeroAccess.A 6.0.6000.16386 (vista_rtm.061101-2205)

VersionsAll file variations of services.exe

MD5SHA-1File size
575fb4211bb07db7d2179b1b05fe7efd ab3281274730d34ba320bcd91257867c56a2b2cc 325.5 KB
754a2cc1f32107ea87cbd305abe3e618 116217e5f733d3c607120133da6bb8776f8cfc48 401 KB
6528baaca25356fe226904dd36c82ba7 747b9e94c9f5c74ae2ad9504aae5a88817863335 325 KB
8f226143046435c75c033b0c52e90ffe 05037ff6dd5bea4d88578ded684062cf777f0ffd 401 KB
b5643cd44ef5f7514d1c6ba2fbbd5e7e e4f8e812d9468347615dc3e6af3cdf71dabe45ad 398.5 KB
b9b3ef6215ed2f53a55bf5ace2536a5f f73cc2a6229c42edcefec4245d88d3f05d402ce9 325.5 KB
cace103fdcdd2b6f5b3614d6c0e15a20 7ed5b91611488dd6425acea134e72241b7d5df7e 326.5 KB
d7fdea92974e3f5295101eb619bdd268 dcf46c116937c420ae3bf1c04013e226d74a55d8 327.5 KB
5f1b6a9c35d3d5ca72d6d6fdef9747d6 54a90c371155985420f455361a5b3ac897e6c96e 253 KB
24acb7e5be595468e3b9aa488b9b4fcb a5b16a7d28d2ba79a9ccfc16ed480ad75a757166 321 KB
d4e6d91c1349b7bfb3599a6ada56851b d1fdd47a13a50805ed4e3d17816c2cd036503421 273 KB
dfac660f0f139276cc9299812de42719 4c9f1d8da9dd96e9d95cc546b92573e99b272c30 375.5 KB
329cf3c97ce4c19375c8abcabae258b0 33e6d6e00de7c2d77da48d13cd7ddc98f2bfadb4 273 KB
934e0b7d77ff78c18d9f8891221b6de3 a1af1d6829236b5bd9980175f8aedd9f9ff3f4b0 375.5 KB
2b336ab6286d6c81fa02cbab914e3c6c e2465e3e24fced09b2a4f3682138c67fc34f1ae9 272.5 KB
8737764f4fd36d6808ee80578409c843 653e37bb2ae7df6bbe5f62aa0bd2566c684cc259 273 KB
cf500580cdd83b145646a4dcfce1cf3c 270673bccdfe960a8885a4f99aceb0c8522ff7e5 110.5 KB
1e07ee3f50dff2fe9b0a9d196e82698f 5870b172a9241ea3f73fd0181c0b6d72a17c3f13 222.5 KB
d255e0ddb63a6223bfd8057266380017 e6a0205cec24abcd43a3595fb474b41d798f6829 219 KB
c519e15665cd89a91ad383fce3cb556a 75b6774627e006668c0a41bb06fb806d68f74cd5 108 KB
aa6e1769469f9d15603a619fc1fb9e18 036f4b93ff39f2bfdc55b75b4726830cd2d3c46c 108.5 KB
020ceaaedc8eb655b6506b8c70d53bb6 6da7935a38dbc2a02e85b012ce39215e34f4576f 108 KB
f0a7d59af279326528715b206669b86c 07a50dd0a5cb87a6394d99ae068663293c77692b 108.5 KB
bdeb2b3b235c8488bc7bae94143415ef f002bf354da1023a1c7c31de67c5314d96dcb44b 108.5 KB
65df52f5b8b6e9bbd183505225c37315 de3701d2c03d9ae29b2d87eccafbbcadf1bfb7e3 108 KB
c3fb1d70cb88722267949694ba51759e 1fce6e1efcb22463fe985ed44291650209ce4317 108.5 KB
8870b0c4a094c1ce80cea6f85fa38ff2 944703a0c48b2df65908b9e9192d72da713884fe 108 KB
953df7327510df0de048b8e80e504ef9 e4bcbc607eade5f60c69ff4bb066bed1e9415f60 108.5 KB
3ed25950bc4603e15cd39a9649eb178e ddb813c8c30b8842c14b1076e7ec595af17899f7 108.5 KB
9ef697af07bb8dd82c3b02ca953a95b7 7f9ec136746a6d49ca34d6e6909222076b074cc0 108.5 KB
1427365eff6f4758ddc88388045e8400 c794f0b1d0cd760f4e2057d9075aeafa70a4bd6b 108 KB
657b69389b893f440b07590c9e963f23 4f29fe11f29adf21d8196395af670978d6b36926 108.5 KB
c52deb6d8cd4b096bf1a9ec001f36507 c6c336fb213ce36da6b9d0df1b67254700146616 108.5 KB
03badd2c0eec04b91abbd4f570569dc5 c0f46b41cd815119d47c99b1c5a3be65f9cf1299 108 KB
a3edbe9053889fb24ab22492472b39dc 7153d4d113c47379fb57aad4918a2f2a64f0c9ee 108.5 KB
0e776ed5f7cc9f94299e70461b7b8185 cb5a33cec4c7b8ef4bd5dc8c241005b66b26cbbf 106 KB
54cb50058851d95e56ec70d09f70857f 8b900989068ccc71bf35ed039c35387df95e9b4a 106.5 KB
82fe81c7f30172a315ad70327b868436 565acec541c3d8f2b5cfe193cabe14243e4595f0 106 KB
4712531ab7a01b7ee059853ca17d39bd 417847305c30fc70cafd2428cfe189b07ff917f2 108 KB
c959fab888648a774d3941a6656711b4 ab250de1da00bf806eeaffedec57fe535ca5972f 108 KB
37561f8d4160d62da86d24ae41fae8de f1512a4b19f70fbd918cf96e2518f39961f6f2f3 108 KB
9d6bf82fe50d55f20f8e10e0f6653886 9396881de59469b69bfec9ce7abb8966e26d9182 108.5 KB
35a8e2160c1481d08fb97666c2127fe2 3c3e56bb7a2e3d66051bd9ecb14adda9bdfd9abb 108.5 KB
3bf0df2d99ee82b08c1e76b72fa562c7 6bc23e940a2314622c6fa765f961d6d801f06253 106 KB
c66f8642b4368436e1c5b6add83f5899 dc57727670f7a07269be32b43d3e4b7e0dc64dbf 106 KB
18fb4870d9b53aedab08fb404133a1c5 8921243895b208576b5ae05142a04acbc246568b 106 KB
c6ce6eec82f187615d1002bb3bb50ed4 b958912d139cb8dbfeeacdd38ba048c4f452174e 105.5 KB
cc73c4430c2fc27fde16a0a4e3678148 99bfc701c125ad44a2949e43e1e253be9d3627fc 106 KB
90463a559a0d57b5d4b3e698e1bdde92 04be886a7f32b476a1bf64fe8833abba87a2512b 105.5 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 49.00%
Windows 7 Ultimate 29.25%
Windows 7 Professional 10.00%
Windows Vista Home Premium 4.00%
Windows 7 Home Basic 3.00%
Windows 7 Starter 0.75%
Windows 8 Pro 0.75%
Windows 7 Enterprise 0.75%
Windows Seven Black Edition 0.50%
Windows Vista Home Basic 0.50%
Windows Vista Ultimate 0.50%
Windows Se7en Titan 0.25%
Windows 8 Pro with Media Center 0.25%
Windows Vista Business 0.25%
Windows 8 0.25%

Distribution by countryDistribution by country

United States installs about 39.65% of Services and Controller app.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 21.60%
Hewlett-Packard 17.32%
ASUS 17.13%
Acer 12.85%
Toshiba 9.31%
Sony 6.33%
Lenovo 4.10%
GIGABYTE 2.79%
Samsung 2.05%
Intel 1.86%
MSI 1.12%
Alienware 0.74%
Medion 0.74%
American Megatrends 0.56%
Sahara 0.37%
Gateway 0.37%
NEC 0.37%
Compaq 0.37%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE