10 Most Common Windows Executable Processes-Services.exe

The genuine services.exe process is always found within the system or system32 folder of your computer, and if you have a version that is stored in any other folder of your computer then you have been infected by the Sober.X worm.

The genuine process is responsible for the activation and deactivation of Windows services and is an essential component of your Operating System that is required in order to effectively use your computer.

The Sober.X worm is a mass mailing worm that collates email addresses from infected computers and then, using its own SMTP server, attempts to propagate to those email addresses. It will also reduce the security settings of any infected computer leaving it more vulnerable to attack from other infections.