answersLogoWhite

0

The Windows Service Control Manager (SCM)(SERVICES.EXE) is a remote procedure call (RPC) server that manages creating, deleting, starting and stopping of Windows Services. It is started at system boot and is RPC based so that service configuration and service control programs can manipulate services on remote machines.

The service functions provide an interface for the following tasks performed by the SCM:

  • Maintaining the database of installed services.
  • Starting services and driver services either upon system startup or upon demand
  • Enumerating installed services and driver services.
  • Maintaining status information for running services and driver services.
  • Transmitting control requests to running services.
  • Locking and unlocking the service database.

When a service is started, the SCM performs the following steps:

  • Retrieve the account information stored in the database.
  • Log on the service account.
  • Load the user profile.
  • Create the service in the suspended state.
  • Assign the logon token to the process.
  • Allow the process to execute

It is not a virus, it is just a component used by the system to keep it running properly.

User Avatar

Wiki User

15y ago

What else can I help you with?