1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved service.exe Entry point not found

Discussion in 'Virus & Other Malware Removal' started by slavka05, Feb 2, 2019.

Thread Status:
Not open for further replies.
Advertisement
  1. slavka05

    slavka05 Thread Starter

    Joined:
    Feb 2, 2019
    Messages:
    7
    Hello, got this problem on my HP laptop.
    [​IMG]
    Anyone please can help me with this? pop up every 5 mins.
     
  2. lunarlander

    lunarlander

    Joined:
    Sep 21, 2007
    Messages:
    11,438
    C:\ProgramData\Windows\ does not exist on my reference machine running Win 10 Pro version 1809. You might have been hacked.
     
  3. slavka05

    slavka05 Thread Starter

    Joined:
    Feb 2, 2019
    Messages:
    7
    Yes its hidden folder on my C:\ Disk. What should i do then? can i just remove this folder?
     
  4. slavka05

    slavka05 Thread Starter

    Joined:
    Feb 2, 2019
    Messages:
    7
    This what is in that folder also there is service.exe which cause a problems
    [​IMG]
     
  5. slavka05

    slavka05 Thread Starter

    Joined:
    Feb 2, 2019
    Messages:
    7
    Is any antivirus can help with that?
     
  6. lunarlander

    lunarlander

    Joined:
    Sep 21, 2007
    Messages:
    11,438
    My standard advise for people who have been attacked is to backup all data and do a clean install of Windows from DVD/USB stick. The hacker can hide files anywhere and name them Like Windows familiar program names. You have a service.exe and winlogin.exe in that folder. The correct file names should be \windows\system32\services.exe and \windows\system32\winlogon.exe , You have definitely been hacked. And antivirus program scans are useless against hacking tools - they can only identify malware and viruses.
     
  7. Chawbacon

    Chawbacon

    Joined:
    Jul 9, 2018
    Messages:
    437
    First Name:
    Jack
    Hello Slavka,

    You may not have to reformat, etc. I will ping a moderator to see if this can be pushed over to the Virus Removal thread.
     
  8. slavka05

    slavka05 Thread Starter

    Joined:
    Feb 2, 2019
    Messages:
    7
    Hey, Thanks. This error show up when im switching on Wifi connection. Its not showing when Internet is off!
     
  9. lunarlander

    lunarlander

    Joined:
    Sep 21, 2007
    Messages:
    11,438
    They can see you as you attempt to remediate and bring over new tools to replace the ones being removed. But it can also be true that their tool is not working. Proceed wisely.
     
    Last edited: Feb 2, 2019
  10. crjdriver

    crjdriver Moderator

    Joined:
    Jan 2, 2001
    Messages:
    38,994
    I moved the thread for you however I agree with the advise to clean install. That is just me and I have NO patience to remove a virus/malware. A security person can take a look and advise you as to how to proceed.
     
  11. slavka05

    slavka05 Thread Starter

    Joined:
    Feb 2, 2019
    Messages:
    7
    Thanks a lot for your help, i will do clean install, hopefully it helps!
     
  12. crjdriver

    crjdriver Moderator

    Joined:
    Jan 2, 2001
    Messages:
    38,994
    You might want to wait for a security person to take a look; up to you. In any case, be sure you have at least two backups of important data.
    If you do clean install windows, do so in this order;
    1 Go to the support page for your motherboard or system
    2 Download the drivers you are going to need ie chipset/mb driver, lan driver, sound, etc. If you have onboard video, download the video driver from the support page. If you have a real video card ie nvidia or amd, go to the relevant support page and download the latest driver. Put these on a flash drive, external drive, etc
    3 Shutdown and open the case, pull the pw connectors from all drives except the system drive ie where you are going to install windows. Put your install usb in a usb port
    4 Pw ON and either access the quick boot menu [read your manual] OR enter the bios and set the usb drive as the first boot device. Reboot
    5 Do a custom install and delete ALL partitions on the drive. Now install windows
    6 When done with the basic install, shutdown and reconnect any drives you disconnected
    7 Install the drivers you downloaded in step#2. Install the chipset driver first then install the rest. Reboot when prompted.

    Done.
     
    Last edited: Feb 2, 2019
  13. iMacg3

    iMacg3 Malware Specialist

    Joined:
    Nov 3, 2018
    Messages:
    507
    Welcome to the Tech Support Guy malware removal forum.
    I'm iMacg3 and will be helping you.

    Please keep the following information in mind before we begin:
    • Do not run any fixes or tools on your system unless I request that you do so.
    • Please read all instructions carefully, and complete them in the order listed.
    • If your computer seems to start working normally, please don't abandon the topic. Just because your computer doesn't seem to have a problem doesn't mean that it isn't infected.
    • If you have pirated or illegal software on your computer, uninstall it now before proceeding.
    • If you have questions about anything, please ask.


    --------------------

    It's very likely the malware can be removed without a clean install.
    If you have not already reinstalled Windows, please do this.

    Download Farbar Recovery Scan Tool and save it to your Desktop.

    Note: You need to run the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run them. Only one of them will run on your system, that will be the right version.
    • Right-click FRST/FRST64 and select Run as administrator. (Windows XP users double-click on the file).
    • If you receive a SmartScreen pop-up, click More Info, then Run Anyway.
    • When the tool opens, click Yes to the disclaimer.
    • Press the Scan button.
    • When finished, two log files will pop up - FRST.txt and Addition.txt.
    • Copy and paste the contents of FRST.txt and Addition.txt into your next reply.

    Note - FRST.txt and Addition.txt are saved to the same location as FRST/FRST64.
     
  14. slavka05

    slavka05 Thread Starter

    Joined:
    Feb 2, 2019
    Messages:
    7
    Want to say thank for all your time and help! Very appreciated! Just did clean install of windows everything run smooth now and no errors! Any suggestions how to prevent that in future?
     
  15. crjdriver

    crjdriver Moderator

    Joined:
    Jan 2, 2001
    Messages:
    38,994
    The best security is a well informed user. Do not visit "Questionable" sites, do not install software you do not need, do not download via torrents, etc, etc. Use the MS windows defender rather than a third party AV program.

    The next thing is to make an image of the system drive after a clean install, drivers loaded, and whatever software you really need. Label this image "clean install" At least that is what I call it. Store the image on an external, NAS, second internal drive, etc. If you ever need a clean install in the future, it takes all of 5min to restore the image; clean install done.
    I use and recommend acronis true image for all imaging, cloning, etc however there are some free ones available ie clonezilla, macrium, etc.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1222634

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice