servicenow.exe?

Help and Discussion

Moderator: The Mod Squad

servicenow.exe?

Postby hunter1801 » Mon Jul 25, 2011 1:46 pm

My computer has been freezing randomly lately. For the past week I'd say. Just happened again. I was just browsing the internet and watching a youtube video when it froze.

Checked my Processes to see if anything weird was there and I found "servicenow.exe".

Couldn't find anything specific on that .exe searching Google, but there is a website for "ServiceNow". Don't really know what it is or why it's running.

Any info on what I should do? Other than ending the process. How can I remove it from my computer if I don't need it?

Edit: Just tried to end it and a message shows up saying:

"Do you want to end the system process "servicenow.exe *32"? Ending this process will shut down the operating system immediately. You will lose all unsaved data. Are you sure you want to continue?"

I left it running since it said it will shut down my OS immediately....
hunter1801
Black Belt 1st Degree
Black Belt 1st Degree
 
Posts: 1958
Joined: Thu Feb 17, 2005 3:59 pm
Location: Orange County, California

Postby evasive » Tue Jul 26, 2011 7:07 am

Download:
http://www.teamxscript.org/too/AD-R.exe

Disconnect from network, close all programs, execute, choose Yes, double-click the Ad-Remover icon and select Scan and Clean

After that use Malwarebytes anti-malware to clean up the rest of the mess:
http://www.bleepingcomputer.com/virus-r ... e-tutorial
We hate rut, but we fear change.
********************************
System error, strike any user to continue...
evasive
Mobo-fu Master
Mobo-fu Master
 
Posts: 37389
Joined: Sun May 06, 2001 12:01 am
Location: Netherlands

Postby hunter1801 » Tue Jul 26, 2011 9:47 am

what is AD-R? The only thing I was able to find on it said it was spyware:

http://www.prevx.com/filenames/26475652 ... R.EXE.html
hunter1801
Black Belt 1st Degree
Black Belt 1st Degree
 
Posts: 1958
Joined: Thu Feb 17, 2005 3:59 pm
Location: Orange County, California

Postby hunter1801 » Tue Jul 26, 2011 12:33 pm

Didn't run AD-R yet. I ran Malwarebytes and Avast. Neither picked up that .exe, but Malwarebytes picked up 2 other things.

A data.dat file (located right above the servicenow.exe) that doesn't delete and something else that seemed unrelated, but seems fixed now. The data.dat gets deleted when I tell malwarebytes to remove it, but it gets immeditately created again.

I tried to delete the servicenow.exe, but it said it couldn't since it was being used. I then tried to end the process and I got a BSOD. Computer restarted and it is still there.

Also I found another .exe that isn't running in processes, but still is in my folders.
It is called "RoamingOloXjgTT.exe" and is located in C:, users, (me), Appdata. Underneath the "Roaming" folder.


BSOD report
"Problem signature:
Problem Event Name: BlueScreen
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033

Additional information about the problem:
BCCode: f4
BCP1: 0000000000000003
BCP2: FFFFFA800869FB30
BCP3: FFFFFA800869FE10
BCP4: FFFFF800031DC540
OS Version: 6_1_7600
Service Pack: 0_0
Product: 256_1

Files that help describe the problem:
C:\Windows\Minidump\072611-17830-01.dmp
C:\Users\David\AppData\Local\Temp\WER-33727-0.sysdata.xml

Read our privacy statement online:
http://go.microsoft.com/fwlink/?linkid= ... cid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt
"
hunter1801
Black Belt 1st Degree
Black Belt 1st Degree
 
Posts: 1958
Joined: Thu Feb 17, 2005 3:59 pm
Location: Orange County, California

Postby evasive » Wed Jul 27, 2011 12:51 am

It is the only utility I can find in relation to removing your servicenow.exe

I don't know how good your french is:
http://forum.zebulon.fr/double-accent-c ... 86707.html
We hate rut, but we fear change.
********************************
System error, strike any user to continue...
evasive
Mobo-fu Master
Mobo-fu Master
 
Posts: 37389
Joined: Sun May 06, 2001 12:01 am
Location: Netherlands

Postby Mr T » Wed Jul 27, 2011 8:47 am

Told a lass at work to basically do this (but she ignored me)... Any how it works for me....

Boot into windows and control panel and user accounts...

Create a new account called Administrator and give it full admin rights...

Password protect it.

Set the other accounts to 'general' or 'standard' user.

Log off and log in to the new admin account.

Download from filehippo.com (of course):
Latest Javascript
Latest Flashplayer
and if you hadn't done so Malwarebytes and
Microsoft Security essentials...

Uninstall your current antivirus...

Reboot and log back into the admin account..

Install all the programs... Update the AV programs.Also download and install crap cleaner, run it and clear your temp and internet cache...

Now, the removal......

Reboot into SAFE MODE (you know F8 before the windows splash screen) and log into the admin account...

And run Malwarebytes.. Take a note of where any nasties are, you may have to manually delete them if Malwarebytes cannot remove them... Anyway, remove them and reboot...

Boot back into the admin account and scan the system with M$ Security Essentials and again delete any nasties....

You can delete the admin account and set another account to admin, but I wouldn't - virus writers rely on windows users using the first account and guess what its an administrator account... If they gain a foot hold, it can cause havoc... Henceforth, why Vista, win7 have User Access Control and OSX,Unix,BSD and Linux have root settings...

But (again from experience), the only true way to rid the system of a virus (windows system) is to format and start again...

Good luck.... :D
I have been programming on computers since the ZX81.
I am an apprentice trained Electronics Engineer with qualifications to back it up.
I have been repairing computers since 1996.
Yet to some people I still know nothing...
Mr T
Enlightened Master
Enlightened Master
 
Posts: 17092
Joined: Fri Jun 14, 2002 1:03 am
Location: England

Postby Toby B. » Wed Jul 27, 2011 9:23 am

if your gonna get rid of one AV program and install another, wouldn't it be best to uninstall the first one then run something like Ccleaner to rid the system of leftover bits that may interfere with the new program?
Toby B.
Lead Mobo-fu Master
Lead Mobo-fu Master
 
Posts: 14277
Joined: Sun Dec 16, 2001 1:01 am
Location: Maine

Postby Mr T » Wed Jul 27, 2011 11:39 am

Toby B. wrote:if your gonna get rid of one AV program and install another, wouldn't it be best to uninstall the first one then run something like Ccleaner to rid the system of leftover bits that may interfere with the new program?
Not usually, the only one I had an issue with was an old Norton AV... And that was a fair bit back...
I have been programming on computers since the ZX81.
I am an apprentice trained Electronics Engineer with qualifications to back it up.
I have been repairing computers since 1996.
Yet to some people I still know nothing...
Mr T
Enlightened Master
Enlightened Master
 
Posts: 17092
Joined: Fri Jun 14, 2002 1:03 am
Location: England

Postby Toby B. » Wed Jul 27, 2011 4:41 pm

I do things a bit odd I guess lol
Toby B.
Lead Mobo-fu Master
Lead Mobo-fu Master
 
Posts: 14277
Joined: Sun Dec 16, 2001 1:01 am
Location: Maine


Return to Virus/Spyware/Security

Who is online

Users browsing this forum: No registered users and 0 guests