Share via

services.exe safe to remove or not?

Anonymous
2016-12-28T18:50:01+00:00

Hello! So, I have recently noticed that my computer is running much slower than before, therefore I decided to check out the Processes and the services that are running (on) my computer.

I noticed this one, and the question is regarding the very one... services.exe

I have been searching for it on the webb and various sites have told me that it is not supposed to belong on the Windows 7. OS that I am running. It is only for Vista. and XP.

Is that so? Would it be safe to remove it? ...as a virus has hidden under that name, or is it actually to belong on my Windows 7.?

Also, I now have about 38 processes running with... (all users processes checked) ...without "any applications" running, is that normal or is it very much do you think? I know that it is completely personally, based on what programs you have, but I wonder if it is much higher or less than normal?

Thank you in advance!

Moved from Virus & Malware

Windows for home | Previous Windows versions | Files, folders, and storage

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

18 answers

Sort by: Most helpful
  1. Anonymous
    2016-12-29T21:47:45+00:00

    Answer-by-number (no more screenshots, please - use words):

    1. When (exact date, preferably) did you replace the HDD & then do another clean install of Win7?
    2. Did you backup any data prior to replacing the HDD and then restore it to the computer after Win7 was installed again?
    3. Are you running Win7 64-bit or 32-bit?

    4a. Was Microsoft Security Essentials (MSE) originally offered & installed via Windows Update or did you intentionally choose to install it?

    4b. In Windows Explorer [WinKey+E], navigate to & right-click on

            • **C:\Program Files**Microsoft Security Client <=this folder

    Select Properties: What is the Created date displayed on the resulting General tab?

    4c. What ANTIMALWARE CLIENT version is currently installed? To find out, open MSE & click on the downward-pointing arrow to the right of HELP then select ABOUT SECURITY ESSENTIALS.

    4d. What ENGINE & DEFINITIONS versions?

    1. Is KB3092627 listed in Installed Updates (not Update History)?
    2. When you opened Internet Explorer to the java.com link in #6 of my previous post, were you prompted to update to Java 8 Version 111?
    3. Can you successfully upgrade to Flash Player version 24.0.0.186 (or higher) by opening Internet Explorer ONLY to this page? => http://www.adobe.com/go/getflash 
    • BEWARE any pre-checked options to "drive-by" install unwanted, third-party software; e.g., Google Toolbar; McAfee Security Scan Plus [<= the most likely source of thatMcAfee Application Installed Cleanup entry in Services]!

    8. You cannot update Chrome per the instructions on this page, is that correct?

    2 people found this answer helpful.
    0 comments No comments
  2. Rob Koch 25,875 Reputation points Volunteer Moderator
    2016-12-28T19:50:54+00:00

    Though I agree that the Neuber site describes the Services.exe - Service Control Manager file, I found it a bit confusing myself, so here's the associated description from Wikipedia which provides a bit more complete and organized description.

    https://en.wikipedia.org/wiki/Service_Control_Manager

    The official Microsoft descriptions for the Service Control Manager are intended for software developers, so they don't describe it in terms of the file name itself, which is why it was difficult for you to find.

    https://msdn.microsoft.com/en-us/library/windows/desktop/ms685150%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396

    https://msdn.microsoft.com/en-us/library/windows/desktop/ms685141(v=vs.85).aspx

    Fundamentally, since the Service Control Manager controls all other services, it can be affected either by any of those services or by direct malware injection itself, so it's not simple to tell what's truly causing high utilization or RAM use issues.  For this reason, you typically use malware detection tools instead to try and determine what may be causing the issues if malware is suspected.

    However, it's also possible that some misbehaving service or remote device service such as a printer driver could be causing such issues as well.  That's why you'll find so many asking about this executable on the web, but also having no idea what it is like yourself.

    < EDIT > Note that if you right-click the Services.exe file in Task Manager and look at properties, it should contain a valid Digital Signature using a Microsoft Windows certificate which chains up to the Microsoft Root Certificate Authority.  The details tab should also contain information indicating that it's part of the Microsoft Windows Operating System and copyright Microsoft Corporation, though these items could be faked if the digital signature isn't present or otherwise not from Microsoft as well.

    Rob

    2 people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2016-12-28T19:03:07+00:00
    2 people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2017-01-01T22:55:19+00:00

    Not to be rude towards you or something, but... how may I know if these links/scans are safe to use?

    Because I let a site handle my computer files. Or should I not worry?

    I will try to re-install chrome. I hope that all my passwords, autofill and history will be safe for use afterwards, I hope so.

    But I will try to get the newest version!

    I might consider scanning, but I have to be careful.

    Thank you!

    1 person found this answer helpful.
    0 comments No comments
  5. Anonymous
    2016-12-28T20:49:12+00:00

    Ahh, thank you very much.

    I am not sure where to look for the certificate... I right clicked the process and down to properties.

    I thought that this section would be the most fitting for the certificate, or am I on the wrong place looking?

    The language is swedish, but perhaps you recognize and may be able to see if this is the correct section as to where the certificate should be displayed? It does indeed say Microsoft and Windows... but is this not something that the nasty-program-creators simply can write themselves with ease?

    Also, I do not think this is what slows the computer down in this case then, I was just worried because I had read that it was only ment to exist on Windows XP. & Windows Vista.

    Therefore I thought that it was very likely that it would be a nasty program in disguise.

    So, thank you for your answear, but I think that I should stop further investigation into this matter, as it seems unlikely to be a nasty program.

    1 person found this answer helpful.
    0 comments No comments