AndriKristinsson

Terrible virus in services.exe

A scan with Microsoft Safety Scanner detected a virus in C:\windows\system32\services.exe. When I try to disinfect it the computer restarts with the error message: "Windows has encountered a critical problem and will restart automatically in one minute. Please save your work." When the computer starts up again the virus is still there.

Also when I try to end services.exe in task manager the computer restarts.

What can I do to get rid of this virus?

The virus is called: Win32/Sirefef.R

This thread is locked. You can follow the question or vote as helpful, but you cannot reply to this thread.

Question Info

Last updated February 19, 2019 Views 39,323 Applies to:

Answer

KuttusRam

In Windows 7 and Vista

Go to Start Menu and Inside the Search box type CMD.

Now at the Top side if the Start menu you can see one file Called CMD.

Right Click on that one and Select the Option RUN AS ADMINISTRATOR

In Windows XP

Go to Run and type "cmd" to open the command prompt

Now you will get a black Window. Inside that black window type the above commands.

Type or copy & paste "sfc /scanfile=c:\windows\system32\services.exe"

and press enter

. Restart your computer

This will replace the infected services.exe with the original.

If it dosen't work try it in safe mode. Or we can replace the infected file with a Good one.

That one is a Little Complicated one.

http://123seminarsonly.com/Blog/trojan-patchepsys-or-trojan-horse-dropper-generic_c-mmi-detecting-services-exe-as-infection

MCSA, MCSE,MCP,MCTS & Exchange.
Mark helpful posts & answers

Did this solve your problem?

Sorry this didn't help.

Great! Thanks for marking this as the answer.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this response?

Thanks for your feedback.

Answer

Chris1029

If The safety scanner is detecting but unable to remove the virus, try using windows defender offline.

It is installed on a flash drive and used to perform a bootime scan to remove malwae that cannot be removed from within windows.

http://windows.microsoft.com/en-US/windows/what-is-windows-defender-offline/

Also do you have antivirus software installed?

Good luck