Multiple unknown Windows Services listed....

[Bubbles]

While checking the state of a couple of Windows services, I noticed that listed are hundreds of services with what appear to be random numbers:

 

 

Looking at the properties of a few of them, they all of them seem to point to an exe with the same name as the service located in C:\WINDOWS. Checking, these exe files don't actually appear to exist. I'm just a bit miffed as to where the services have come from/what they could be?

[Sagima]

possibly some sort of malware that manages to register the services before being deleted by your antivirus? maybe check the av logs?

[Arthur]

I'm just a bit miffed as to where the services have come from/what they could be?

Your screenshot looks extremely similar to the one posted in the following Spiceworks thread...

 

https://community.spiceworks.com/topic/2036499-red-alert-all-ad-accounts-getting-locked-out-instantly

 

Their computers were infected with the Qakbot malware.

 

W32.Qakbot is a worm that spreads through network shares and removable drives. It downloads additional files, steals information, and opens a back door on the compromised computer. The worm also contains rootkit functionality to allow it to hide its presence.

 

The EXEs in the Windows folder might be hidden by Qakbot's rootkit if they aren't being immediately deleted by your AV. I would do an offline anti-virus scan using something like Kaspersky's Rescue Disk just to be on the safe side.

Edited February 15, 2018 by Arthur