hey my win xp sp2 comes up wiht this message arror after booting and the system shuts down on pressing any key ....
Error message:
the system process 'c:\win\sys32\service.exe' terminated unexpectedly with status code -1
it would be really great if some one can assist me in fixing this!!
cheers
X11

Dani AI

Generated

Quick diagnosis for : the file path C:\win\sys32\service.exe is not a standard Windows system location (legit files live in C:\Windows\System32 or C:\WINNT\System32). That unusual path plus an immediate shutdown on “press any key” strongly suggests a hostile or corrupt component rather than a normal Windows service. As hinted, treating this as a possible infection is the safest approach.

Immediate steps to try (in order):

  • Do not use the machine on your network until cleaned. If possible, disconnect its network cable.
  • Try booting to Safe Mode (press F8 during boot). If you reach Safe Mode, inspect C:\win\sys32\service.exe (right‑click -> Properties) for publisher info, then run at least two up‑to‑date scanners (for example Malwarebytes and a vendor rescue scanner) and quarantine any detections.
  • If Safe Mode is not available, boot from an external rescue disk/USB (vendor rescue ISO) and run an offline scan. If you have the XP CD, use the Recovery Console to rename the suspect file so it cannot run:
    ren C:\win\sys32\service.exe service.exe.bak

Follow-up cleanup and recovery:

  • After removal, run sfc /scannow and chkdsk /f from a command prompt to repair system files and disk errors.
  • Use Autoruns (Sysinternals) or check HKLM\...\Run keys and Scheduled Tasks to remove leftover startup entries.
  • Restore from a known good backup or rebuild the system if core files are damaged. Change all passwords after cleanup.

Cautions: back up important files before making changes, and if this is an enterprise terminal, escalate to your IT/security team—they should have image/recovery procedures. Given XP SP2 is long out of support, plan migration to a supported OS as a long‑term fix.

Recommended Answers

All 2 Replies

NA its not virus mate!!
as the networked terminal our well protected with anti virus for enterprise level!1
might not be virus
but i will run a scan as well

cheers
X!!

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.