Page 1 of 1


PostPosted: Mon Jul 25, 2011 1:46 pm
by hunter1801
My computer has been freezing randomly lately. For the past week I'd say. Just happened again. I was just browsing the internet and watching a youtube video when it froze.

Checked my Processes to see if anything weird was there and I found "servicenow.exe".

Couldn't find anything specific on that .exe searching Google, but there is a website for "ServiceNow". Don't really know what it is or why it's running.

Any info on what I should do? Other than ending the process. How can I remove it from my computer if I don't need it?

Edit: Just tried to end it and a message shows up saying:

"Do you want to end the system process "servicenow.exe *32"? Ending this process will shut down the operating system immediately. You will lose all unsaved data. Are you sure you want to continue?"

I left it running since it said it will shut down my OS immediately....

PostPosted: Tue Jul 26, 2011 7:07 am
by evasive

Disconnect from network, close all programs, execute, choose Yes, double-click the Ad-Remover icon and select Scan and Clean

After that use Malwarebytes anti-malware to clean up the rest of the mess: ... e-tutorial

PostPosted: Tue Jul 26, 2011 9:47 am
by hunter1801
what is AD-R? The only thing I was able to find on it said it was spyware: ... R.EXE.html

PostPosted: Tue Jul 26, 2011 12:33 pm
by hunter1801
Didn't run AD-R yet. I ran Malwarebytes and Avast. Neither picked up that .exe, but Malwarebytes picked up 2 other things.

A data.dat file (located right above the servicenow.exe) that doesn't delete and something else that seemed unrelated, but seems fixed now. The data.dat gets deleted when I tell malwarebytes to remove it, but it gets immeditately created again.

I tried to delete the servicenow.exe, but it said it couldn't since it was being used. I then tried to end the process and I got a BSOD. Computer restarted and it is still there.

Also I found another .exe that isn't running in processes, but still is in my folders.
It is called "RoamingOloXjgTT.exe" and is located in C:, users, (me), Appdata. Underneath the "Roaming" folder.

BSOD report
"Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.
Locale ID: 1033

Additional information about the problem:
BCCode: f4
BCP1: 0000000000000003
BCP2: FFFFFA800869FB30
BCP3: FFFFFA800869FE10
BCP4: FFFFF800031DC540
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Files that help describe the problem:

Read our privacy statement online: ... cid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:

PostPosted: Wed Jul 27, 2011 12:51 am
by evasive
It is the only utility I can find in relation to removing your servicenow.exe

I don't know how good your french is: ... 86707.html

PostPosted: Wed Jul 27, 2011 8:47 am
by Mr T
Told a lass at work to basically do this (but she ignored me)... Any how it works for me....

Boot into windows and control panel and user accounts...

Create a new account called Administrator and give it full admin rights...

Password protect it.

Set the other accounts to 'general' or 'standard' user.

Log off and log in to the new admin account.

Download from (of course):
Latest Javascript
Latest Flashplayer
and if you hadn't done so Malwarebytes and
Microsoft Security essentials...

Uninstall your current antivirus...

Reboot and log back into the admin account..

Install all the programs... Update the AV programs.Also download and install crap cleaner, run it and clear your temp and internet cache...

Now, the removal......

Reboot into SAFE MODE (you know F8 before the windows splash screen) and log into the admin account...

And run Malwarebytes.. Take a note of where any nasties are, you may have to manually delete them if Malwarebytes cannot remove them... Anyway, remove them and reboot...

Boot back into the admin account and scan the system with M$ Security Essentials and again delete any nasties....

You can delete the admin account and set another account to admin, but I wouldn't - virus writers rely on windows users using the first account and guess what its an administrator account... If they gain a foot hold, it can cause havoc... Henceforth, why Vista, win7 have User Access Control and OSX,Unix,BSD and Linux have root settings...

But (again from experience), the only true way to rid the system of a virus (windows system) is to format and start again...

Good luck.... :D

PostPosted: Wed Jul 27, 2011 9:23 am
by Toby B.
if your gonna get rid of one AV program and install another, wouldn't it be best to uninstall the first one then run something like Ccleaner to rid the system of leftover bits that may interfere with the new program?

PostPosted: Wed Jul 27, 2011 11:39 am
by Mr T
Toby B. wrote:if your gonna get rid of one AV program and install another, wouldn't it be best to uninstall the first one then run something like Ccleaner to rid the system of leftover bits that may interfere with the new program?
Not usually, the only one I had an issue with was an old Norton AV... And that was a fair bit back...

PostPosted: Wed Jul 27, 2011 4:41 pm
by Toby B.
I do things a bit odd I guess lol