Origin and Function
Services.exe process file is a system process defined by Microsoft for its Windows operating system. It is commonly used in Windows 2000/XP/Vista/2007 and is described as a service and controller application. Its function is mainly responsible for the operation and termination of system services. This process also handles the automatic startup of the computer when it is turned on and the shutdown of the computer when it is turned off. In addition, it seems that this process also exists in some versions of Microsoft Mobile Operating System. In addition to the above functions, the operation of Services.exe can reduce the occurrence of service crashes.
This process is a background process (a windowless program that does not require users to control processing), usually running under the System username. As an important system process, it is not recommended that you end the services.exe process or move the location of the process file if it is not the case described below.
Location of this process: C: Windows System 32 (the opening C indicates the partition disk character where the system is installed)
Services.exe occupies CPU
The process of Windows system itself should not occupy 100% CPU and too much memory. This situation is generally related to software conflict, system security and modification. Netizens “purple tears” have reflected that the Serviece.exe process on its computer will take up a lot of CPU and memory resources when it starts. Process Monitor tool analysis found that it was crazy to read and write WINDOWS LastGood. tmp INF oem32. inf and WINDOWS LastGood. tmp INF\ oem32. PNF files, which may be some software. The result of driver file corruption while preparing to install a new driver.
Using Unlocker tool to unlock LastGood. tmp folder can solve the problem of occupying CPU and memory. Of course, it is constantly determined that all the CPU and memory occupied by this process are consistent with the situation reflected by this netizen, but you can use the tools it introduces to make a comparison.
As a process of Windows system itself, it is unavoidable that Trojan Horse viruses use the same name as this process to gain user trust. There are already some worm viruses (W32.Randex.R), Trojan Horse (W32.XTC.Worm) and other viruses intercepted, if your system has the following situation:
In the Task Manager, we can see multiple services.exe running at the same time; the process is not in the C: Windows System 32 directory; the firewall prompts the process to access the Internet; the service.exe error is also very suspicious;
If the above situation occurs, please update the virus library of anti-virus software in time to check the computer completely, and if necessary, consider re-installing the system.