<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/1.5.1-alpha" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
<channel>
	<title>Comments on: Removing virus services.exe and fservice.exe</title>
	<link>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/</link>
	<description>Software Engineering Blog</description>
	<pubDate>Sat, 05 Dec 2009 20:57:26 +0000</pubDate>
	<generator>http://wordpress.org/?v=1.5.1-alpha</generator>

	<item>
		<title>by: Eric</title>
		<link>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-188</link>
		<pubDate>Sat, 04 Jul 2009 12:23:15 +0100</pubDate>
		<guid>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-188</guid>
					<description>Zone Alarm keeps blocking attempts by services.exe to send mass emails. I end up clicking Deny about a thousand times ever time I log on. I tried disabling outlook express so emails couldn't be sent but that didn't work.  Then I tried deleting all services.exe files on my computer except the one in windows/win32 and I ran advanced system optimizer to clean my registry and remove all temp files etc but when i rebooted the problem is still there.  When I search for services.exe now only the one file shows up and I'm pretty sure that's the one I can't delete.  I can't figure out how to get rid of this thing but it's incredibly annoying.</description>
		<content:encoded><![CDATA[	<p>Zone Alarm keeps blocking attempts by services.exe to send mass emails. I end up clicking Deny about a thousand times ever time I log on. I tried disabling outlook express so emails couldn&#8217;t be sent but that didn&#8217;t work.  Then I tried deleting all services.exe files on my computer except the one in windows/win32 and I ran advanced system optimizer to clean my registry and remove all temp files etc but when i rebooted the problem is still there.  When I search for services.exe now only the one file shows up and I&#8217;m pretty sure that&#8217;s the one I can&#8217;t delete.  I can&#8217;t figure out how to get rid of this thing but it&#8217;s incredibly annoying.
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Rodney Minich</title>
		<link>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-187</link>
		<pubDate>Fri, 12 Jun 2009 01:17:53 +0100</pubDate>
		<guid>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-187</guid>
					<description>Does this work on servises.exe.Trojan horse SHeur2.AKRU and where do I typr it.</description>
		<content:encoded><![CDATA[	<p>Does this work on servises.exe.Trojan horse SHeur2.AKRU and where do I typr it.
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: algharem</title>
		<link>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-180</link>
		<pubDate>Thu, 01 Jan 2009 00:23:01 +0000</pubDate>
		<guid>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-180</guid>
					<description>thankx</description>
		<content:encoded><![CDATA[	<p>thankx
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Shivananja KN</title>
		<link>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-156</link>
		<pubDate>Mon, 10 Mar 2008 09:14:26 +0000</pubDate>
		<guid>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-156</guid>
					<description>I want to remove the virous from my desk top computer</description>
		<content:encoded><![CDATA[	<p>I want to remove the virous from my desk top computer
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Shivananja KN</title>
		<link>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-155</link>
		<pubDate>Fri, 29 Feb 2008 14:31:34 +0000</pubDate>
		<guid>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-155</guid>
					<description>I want remove the vrious in my computer</description>
		<content:encoded><![CDATA[	<p>I want remove the vrious in my computer
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Shivananja KN</title>
		<link>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-154</link>
		<pubDate>Fri, 29 Feb 2008 14:30:11 +0000</pubDate>
		<guid>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-154</guid>
					<description>I want to remove the virous in the computer</description>
		<content:encoded><![CDATA[	<p>I want to remove the virous in the computer
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Joset Anthony Zamora</title>
		<link>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-152</link>
		<pubDate>Wed, 20 Feb 2008 09:29:43 +0000</pubDate>
		<guid>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-152</guid>
					<description>You can follow procedure number 1 for terminating the process. Use NTSD -P [PID of fservice.exe] on the command line. Then, do the same for services.exe if HijackThis could not handle it. After successfully terminating those processes, proceed to steps 3 and 4.</description>
		<content:encoded><![CDATA[	<p>You can follow procedure number 1 for terminating the process. Use NTSD -P [PID of fservice.exe] on the command line. Then, do the same for services.exe if HijackThis could not handle it. After successfully terminating those processes, proceed to steps 3 and 4.
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Angel Elf</title>
		<link>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-151</link>
		<pubDate>Wed, 20 Feb 2008 01:38:13 +0000</pubDate>
		<guid>http://eradicus.blogsome.com/2008/01/07/removing-viruses-servicesexe-and-fserviceexe-2/#comment-151</guid>
					<description>While this program was active I could not run Windows Scandisk or Defrag. It is impossible to terminate the Trojan process as Windows believes it to be a system process. The fservice.exe can be deleted but returns on a reboot. Every time I deleted services.exe from WIN.INI and SYSTEM.INI start up list it would come back. The Ad-Aware SE program found the programs, the related registry entries, and identified them as Backdoor.Prorat.16 Trojan but when Ad-Aware tried to delete them the computer would lock up. I was finally able to kill services.exe and fservice.exe by using the process manager in HijackThis 2.2 then manually deleted the two EXE files. The Ad-Aware SE program was then able to delete the registry entries.</description>
		<content:encoded><![CDATA[	<p>While this program was active I could not run Windows Scandisk or Defrag. It is impossible to terminate the Trojan process as Windows believes it to be a system process. The fservice.exe can be deleted but returns on a reboot. Every time I deleted services.exe from WIN.INI and SYSTEM.INI start up list it would come back. The Ad-Aware SE program found the programs, the related registry entries, and identified them as Backdoor.Prorat.16 Trojan but when Ad-Aware tried to delete them the computer would lock up. I was finally able to kill services.exe and fservice.exe by using the process manager in HijackThis 2.2 then manually deleted the two EXE files. The Ad-Aware SE program was then able to delete the registry entries.
</p>
]]></content:encoded>
				</item>
</channel>
</rss>
