CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.

This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Hotplug Devices ManagerXhotplug.exeAdded by the W32.Orpheus.A WORM!
    Hotspot Shield Service (HotspotShieldService)Lopenvpnas.exeRelated to Hotspot_Shield helps secure your computer, your anonymity and your online communications when using free wi-fi. Note: Located in C:\Program Files\Hotspot Shield\bin\
    Hotspot Shield Tray Service (HssTrayService)LHssTrayService.EXERelated to Hotspot_Shield helps secure your computer, your anonymity and your online communications when using free wi-fi. Note: Located in C:\Program Files\Hotspot Shield\bin\
    Houdini License Client (HoudiniServer)Lhserver.exeRelated to Houdini_License_Server from Side Effects Software Inc. Note: Located in C:\WINDOWS\system32\
    Houdini License Server (HoudiniLicenseServer)Lsesinetd.exeRelated to Houdini_License_Server from Side Effects Software Inc. Note: Located in C:\WINDOWS\system32\
    HP Configuration Interface Service (HPConfig)LHPConfig.exeHPConfig Module
    HP Configuration Service (HPConfig)LHPConfig.exeRelated to HP config.
    HP Hard Drive Thermal (HDThermal)LHDThermal.exeRelated to Hewlett-Packard company.
    HP Health Check ServiceLhphc_service.exeRelated to HP_Health_Check Service. Note: Located in \%Program Files%\Hewlett-Packard\HP Health Check\
    HP Insight Event Notifier (CIMnotify)Lcimntfy.exeRelated to HP products
    HP Insight Foundation Agents (CqMgHost)Lcqmghost.exeRelated to HP products
    HP Insight NIC Agent (CpqNicMgmt)Lcpqnimgt.exeRelated to HP products
    HP Insight Server Agents (CqMgServ)Lcqmgserv.exeRelated to HP products
    HP Insight Storage Agents (CqMgStor)Lcqmgstor.exeRelated to HP products
    HP OpenView Trace ServiceLOVTrace.exeHP OpenView Internet Services
    HP Port ResolverLhpbpro.exeRelated to Hewlett-Packard Company
    HP ProLiant Remote Monitor Service (CpqRcmc)LCpqRcmc.exeRelated to HP_ProLiant_Remote_Monitor_Service Note: This file is located in C:\%WINDIR%\
    HP ProLiant System Shutdown Service (sysdown)Lsysdown.exeRelated to HP products
    HP ProtectTools Device Locking / Auditing (FLCDLOCK)Lflcdlock.exeRelated to ProtectTools from Hewlett-Packard Development Co. Locking Device. Note: Located in \%WINDIR%\System32\
    HP RF Device Service (HpRfDev)LHpRfDev.exesupport for HP managing wireless devices
    hp service (Hpsys)Xhpsys.exeAdded by the W32/Codbot-AF WORM! Note: This service has nothing to do with HP. This worm\trojan file is found in the System32 folder.
    HP StatusLhpb2ksrv.exeRelated to Hewlett-Packard Company
    HP Status PrintLhpbhksrv.exeRelated to Hewlett-Packard company.
    HP Status ServerLhpboid.exeRelated to Hewlett-Packard Company
    HP System Management Homepage (SysMgmtHp)Lsmhstart.exeRelated to HP products
    HP Version Control Agent (cpqvcagent)Lvcagent.exeRelated to HP products
    HP Web JetadminLhpwebjetd.exeRelated to HP WebJetAdmin software, used to configure and monitor network print servers.
    HP WMI Interface (hpqwmi)LHPQWMI.exeRelated to Hewlett-Packard
    hpdj?hpdj.exeMaybe HP related? Sits in TEMP folder.
    hpdjLhpztsb04.exeHewlett Packard printer toolbox, sits in taskbar. Path to executable file - %windir%\system32\spool\drivers\w32x86\3\
    hpdriverXhpdriver.sysAdded by the Troj/Rootkit-AA TROJAN! Note: This trojan file is found in the System32 folder. Read the link, rootkit type stealth involved.
    HpPrinterXhpserver.exeAdded by the Troj/CmjSpy-W Trojan!
    hpqwmiexLhpqwmiex.exeRelated to HP_ProtectTools security manager
    HPR34K8Xhpr34k8.sysAdded by the Troj/Rootkit-AA TROJAN! Read the link, rootkit type stealth involved.
    HPWirelessMgrLHPWirelessMgr.exeLocated in HP Notebook Utilities - guessing for wireless connection.
    HTTP SSL (HTTPFilter)Llsass.exeRelated to Application_Isolation_Mode_Functions Microsoft IIS 6.0. Note: Located in C:\%WINDIR%\System32\
    huapeak?huapeak.exeUnknown origin.
    Human Interface Device Access (hidserv)Lsvchost.exe -k LocalSystemNetworkRestrictedPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Hummingbird Inetd (HCLInetd)Linetd32.exeRelated to Hummingbird Ltd. - http://www.hummingbird.com/
    Hummingbird Jconfig Daemon (Jconfigd)Ljconfigdnt.exeRelated to Hummingbird Ltd. - http://www.hummingbird.com/
    HXD Service 100 (HackerDefender100)Xnewka.exeVirus http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=39265
    H_Server (H_Server)XG_Server.exeAdded by the Troj/GrayBird-W TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
    I-O DATA Device Management Service (IoDevMgrService)LIoDevMgrService.exeRelated to I-O_DATA_Device_Management service from I-O DATA DEVICE, INC. Note: Located in \%Program Files%\I-O DATA\IoDevMgrService\
    i386pXI386P.SYSAdded by the Backdoor.Rustock TROJAN! Found in the System32\drivers folder. Read the link, rootkit type stealth involved.
    IAA Event Monitor (IAANTMon)Liaantmon.exeIntel related
    IapLIap.exeRelated to Dell OpenManage Client Instrumentation.
    IBM Active PCI Alert Service (IBMHPS)LIBMHPASV.EXERelated to IBM_Active_PCI Alert Service from IBM Corp. Note: Located in \%WINDIR%\System32\
    IBM Automatic Server Restart Executable (ibmasrex)Libmasrex.exeUnknown owner :Location C:\WINDOWS\system32\ibmasrex.exe Related to IBM servers.
    IBM Automatic Server Restart Service for IPMI
    (ibms6asr)    		LIBMIASRW.EXERelated to IBM_Automatic_Server_Restart from IBM. Note: Located in \%WINDIR%\System32\
    IBM CICS Transaction Gateway
    (IBMCICSTransactionGateway)    		LCTGSERVICE.EXERelated to IBM Corp.
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    151ppm 0.081s (0.005s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer