CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    FireDaemon Service: events (events)XFireDaemon.EXEReported by Ewido security suite as Backdoor.SdBot.nj. Note: FireDaemon is a legitimate product that has been included, illegally, as part of the payload in a series of Worms and Trojans that exploit various security holes in Microsoft's Operating System products. For More information including cleanup Click_Here
    FireDaemon Service: rundll (rundll)XFireDaemon.EXEReported by Ewido security suite as Backdoor.SdBot.nj. Note: FireDaemon is a legitimate product that has been included, illegally, as part of the payload in a series of Worms and Trojans that exploit various security holes in Microsoft's Operating System products. For More information including cleanup Click_Here
    firefox auto updateXfirefox.exeAdded by the W32/Tilebot-DN WORM!, Note: Located in C:\%WINDIR%\
    FireGL23UtilLf23hser.exeRelated to ATI_Fire_GL3 Video Accelerator from FGL Graphics now owned by ATI. Note: located in \%WINDIR%\System32\
    Firewall service (FWSvc)XFWSvc.exeRelated to WinAntiVirus Pro - rogue "antivirus"
    Fix-It Task Manager (mxserver)Lmxserver.exeRelated to Ontrack Inc. Data Recovery service.
    FJTWMKSVLFJTWMKSV.exeRelated to PFU's driver broad line-up of Fujitsu brand "fi-Series" document scanners. Note: located in \%WINDIR%\twain_32\fjscan32\
    Flash Communication Admin Service (FlashComAdmin)LFlashComAdmin.exeAppears to be modem driver related, Made by Macromedia, Inc.
    Flash Communication Server (FlashCom)LFlashCom.exeAppears to be modem driver related, Made by Macromedia, Inc.
    FLEXlm server for PTCLlmgrd.exelmgrd.exe is a process associated with the Macrovision application-generic license server.
    FLEXnet Licensing ServiceLFNPLicensingService.exeRelated to FLEXnet_Publisher from Macrovision. Note: Located in C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\
    Fn+F5 Service (FNF5SVC)LFNF5SVC.exeRelated to Function_key Hotkey on Lenovo computers. Note: Located in \%Program Files%\LENOVO\HOTKEY\
    Folder Size (FolderSize)LFolderSizeSvc.exeRelated to Folder_Size Adds an other column to your folder view. Note: Located in C:\Program Files\FolderSize\
    Folding@Home
    (FAH@C:+FAH+fah-service+FAH502-Console.exe)
    LFAH502-Console.exeRelated to Stanford University - Folding@home is a distributed client computing effort by Stanford University http://tech-report.com/etc/folding/
    Font Cache DownlevelLFontCacheService.exeService installed by the Microsoft Avalon open beta.
    ForceField IswSvc (IswSvc)LIswSvc.exeRelated to ZoneAlarm_ForceField service from Check Point Software Technologies. Note: Located in \%Program Files%\CheckPoint\ZAForceField\
    ForceWare Intelligent Application Manager (IAM)LnSvcAppFlt.exeRelated to Nvidia Corp. Intelligent Application Manager.
    ForceWare IP service (nSvcIp)LnSvcIp.exeRelated to Nvidia Corp. Network Access Manager.
    ForceWare user log service (nSvcLog)LnSvcLog.exeRelated to Nvidia Corp. Network Access Manager.
    Forceware Web Interface (ForcewareWebInterface)Lapache.exeApache Web Server Software
    Fore! Internet (4Internet)L4Internet.exeRelated to Fore!_ Reservations Technology, LLC Golf Reservations Software. Note: Located in \%Program Files%\Fore! Reservations\
    Fore! Reservations PMS Remoting Server (4MCServe)L4MCServ.exeRelated to Fore!_ Reservations Technology, LLC Golf Reservations Software. Note: Located in \%Program Files%\Fore! Reservations\
    FormScape ServerLfsserver.exeRelated to FormScape Server from Litco Systems. Note: Located in \%Program Files%\FormScapeSoftware\FormScape\bin\exe\
    FormScape Storage ServicesLfsserver.exeRelated to FormScape Storeage Services from Litco Systems. Note: Located in \%Program Files%\FormScapeSoftware\FormScape\bin\exe\
    FormScape Web Server (FormScapeWebServer)LApache.exeApache Web Server Software. Note: Located in \%Program Files%\FormScapeSoftware\FormScape\Apache2\bin\
    Fortech Proxy+LProxyPlus.exeFORTECH Ltd. http://www.proxyplus.cz/
    Fortinet Service Scheduler (FA_Scheduler)Lscheduler.exeRelated to Fortinet security systems are the new generation of real time network protection systems. Note: located in C:\Program Files\Fortinet\FortiClient\
    FortiSslvpnDaemonLFortiSslvpnDaemon.exeRelated to SSL_vpn software from Fortinet inc. Note: Located in \%WINDIR%\System32\
    FrameworkOsrvany1234.exeUnknown owner: Location C:\WINDOWS\system32\srvany1234.exe
    France Telecom Routing Table Service (FTRTSVC)LFTRTSVC.exeRelated to France Telecom A French ISP. Note: Located in C:\WINDOWS\System32\
    Freeloader Monthly Subscription ServiceLFreeloader Monthly Subscription Service File.exeRelated to freeloader.com Online game services.
    FreePOPsLfreepopsservice.exeFreePOPs is distributed by the GNU General Public License is intended to guarantee your freedom to share and change free software. Make sure your copy is not adware or includes a virus. Note: Located in C:\Program Files\FreePOPs\
    FreeSSHDServiceLFreeSSHDService.exeRelated to OpenSSH A free SSH/SecSH protocol suite providing encryption for network services like remote login or remote file transfer. Note: located in C:\Program Files\freeSSHd\
    FreezeScreenSaverXFreezeScreenSaver.exe FREEZESCREENSAVER.EXE_is_Adware Note: Located in C:\WINDOWS\system32\
    frepdll.exeXFREPDLL.EXEAdded by the W32/Tilebot-D WORM! Note: Gives the fake description "ET dll Locator tool". Read the link, rootkit type stealth involved.
    FS Service ControlLNTServApp.exeRelated to ArchestrA Software architecture for the integration of your automation systems.
    fsbwsysOfsbwsys.exeRelated to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program Files\F-Secure Internet Security\backweb\4476822\program folder.
    FSGKHS (F-Secure Gatekeeper Handler Starter)Lfsgk32st.exeRelated to F-Secure Anti-Virus Prog.
    FSMALFSMA32.EXERelated to F-Secure Anti-Virus Prog.
    Fujitsu Services VPN Manager (FS_VPNmanager) ?FSVPNManager.exeAppears to be software from Fujitsu
    Fujitsu Siemens Computers Diagnostic Testhandler
    (TestHandler)
    LTestHandler.exeRelated to Fujitsu Siemens products
    Function Discovery Provider Host (fdPHost)LfdPHost.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Function Discovery Resource Publication (FDResPub)Lfdrespub.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    FUS_Server (USEPigeonServer)XFTPServer.exeAdded by the Troj/Hunpigon-RO TROJAN! Note: This trojan file is found in %windir%
    FW Configuration InterpreterLUmxCfg.exeTiny Firewall
    FW Event ManagerLUmxAgent.exeTiny Firewall
    FW Live UpdateLumxlu.exeTiny Firewall
    FW User to IP Address TranslationLumxuta.exeTiny Firewall
    FW User-Mode Helper (UmxFwHlp)LUmxFwHlp.exeTiny Software Firewall User-Mode Helper. Made by Tiny Software, Inc. A subsidiary of Computer_Associates_International The file associated with this service is located in the Program Files\Tiny Firewall folder.
    fwdrv.sysXfwdrv.sys Troj/Mailbot-CG Note:Located in %root%

    Engine Version 2.0 by CastleCops

    spacer spacer