CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    iolo FileInfoList Service (ioloFileInfoList)LioloServiceManager.exeRelated to System_Mechanic from iolo technologies. Note: Located in \%Program Files%\iolo\common\lib\
    iolo System Guard (IOLO_SRV)LIoloSGCtrl.exeRelated to System_Mechanic by Iolo
    iolo System Service (ioloSystemService)LioloServiceManager.exeRelated to System_Mechanic from iolo technologies. Note: Located in \%Program Files%\iolo\common\lib\
    Iomega Active DiskLADService.exeRelated to Iomega Corporation
    Iomega Activity Disk2LActivityDisk.exeActivityDisk Iomega Corporation SmartSoft ActivityDisk
    Iomega App ServicesLAppServices.exeIomega related
    IomegaAccessLIOMEGAACCESS.EXErelated to Iomega Backup
    ION Java Daemon 2.0Lion_srv.exeRelated to ITT_Visual_Information_Solutions ION Script is a powerful tool for creating Web-based IDL visualization and analysis applications. Note: Located in C:\Program Files\RSI\IDL60\products\ion20\ion_java\bin\
    ION Java Daemon 6.1Lion_srv.exeRelated to ITT_Visual_Information_Solutions ION Script is a powerful tool for creating Web-based IDL visualization and analysis applications. Note: Located in C:\Program Files\RSI\IDL61\products\ion61\ion_java\bin\
    Ip4Sec (Ip4Sec)Xip.sysAdded by the Satiloler.E TROJAN! Read the link, rootkit type stealth involved.
    Ip6FwXip6fw.sys Troj/Pushu-Gen Note: Located in C:\Windows\System\Drivers (Win9x/Me), C:\%WINDIR%\System32\Drivers (XP/WinNT/2K) May also have an additional services installed. Read link
    iPAHelper.exeLiPAHelper.exeRelated to iPod_Access for Windows. Note: Located in C:\Program Files\iPod Access for Windows\
    iPassConnectEngineLiPassConnectEngine.exeRelated to iPassConnect Universal Client. iPass addresses the needs of both users and IT by making safe, simple and effective network access a reality, no matter where end users are located. Note: Located in C:\Program Files\iPass\iPassConnect iRAS\
    iPCAgentLiPCAgent.exeRelated to iPCAgent from Ipass Inc. Give your mobile workers a safe, simple and reliable way to access the Internet and corporate network Note: Located in \%Program Files%\iPass\iPassConnect Corporate\
    iPod ?? (iPod Service)LiPodService.exeRelated to Apple iPod.
    iPod ServiceLiPodService.exeRelated to Apple iPod.
    iPod Service (ipod service)LiPodService.exeRelated to Apple iPod.
    iPod Service (iPodService)LiPodService.exeRelated to Apple iPod
    iPod ·t?? (iPod Service)LiPodService.exeRelated to Apple iPod.
    iPod-Dienst (iPod Service)LiPodService.exeRelated to Apple iPod.
    iPod-palvelu (iPod Service)LRelated to Apple iPod.iPodService.exe
    iPod-palvelu (iPod Service)LiPodService.exeRelated to Apple iPod.
    iPod-service (iPod Service)LiPodService.exeRelated to Apple iPod.
    iPod-service (iPodService)LiPodService.exeRelated to Apple iPod.
    iPod-tjeneste (iPod Service)LiPodService.exeRelated to Apple iPod.
    iPodServiceLiPodService.exeRelated to Apple iPod.
    iPodSrvLiPodSrv.exeRelated to iPod Apple software. Note: located in C:\Program Files\iPod\bin\ in Windows 2000/XP/2003.
    IPODT1000 (ssipod1)ssipod1.sys Troj/Goldun-FI
    IPRIPXipripst.dllDetected as W32/Mofei-V Located in \ipripst.dll
    IPRIP (IPRIP)Xsvchost.exe -k netsvcsAdded by the Backdoor.Ripgof TROJAN! Read the link, rootkit type stealth involved.
    IPS Core Service (IPSSVC)LIPSSVC.EXEA VPN client service found in Lenovo Thinkpad. Note: located in C:\WINDOWS\system32\
    IPS-Basisservice (IPSSVC)LIPSSVC.EXEA VPN client service found in Lenovo Thinkpad. Note: located in C:\WINDOWS\system32\
    IPSEC Services (PolicyAgent)Llsass.exeRelated to Active_Directory-based_IPSec_policies For Windows 2000 and 2003. Note: Located in \%WINDIR%\system32\
    Ipswitch WS_FTP Queue (ftpqueue)Lftpsched.exeRelated to Part of WS_FTP Pro from Ipswitch. Note: Located in C:\Program Files\WS_FTP Pro\
    Ipswitch WS_FTP Service (iFtpSvc)LiFtpSvc.exeRelated to Ipswitch_WS_FTP The main exe file of WS-FTP server. Note: Located in C:\iFtpSvc\
    IPtableXipconfig32.exeAdded by the W32/Tilebot-AP WORM! Note: This worm file is found in the Windows or Winnt folder.
    IPv6 Helper DriverXcsass.exeAdded by the AGOBOT.TC WORM!
    IPX/SPX (NWLink)Xusbmini.sys Troj/Proxy-CY Note: Located in %windir%\system32\drivers Read the link, allows remote access
    IrBridge User-Level Interface (USRBRIDG)Lusrbridg.exeRelated to the Extended Systems infrared port, made by Extended_Systems Inc. This file should be located in the Windows\System32\ or Winnt\System32 folder.
    IS Service (ISSVC)LISSVC.exeRelated to Symantec's Firewall \%Program Files%\Symantec Client Security\Symantec Client Firewall\
    ISAM SMT Service (ISAMsmt)Lisamsmt.exeRelated to IBM Global Services - http://www.anti-spy.info/process/isamsmt.exe.html
    ISC BIND (named)Lnamed.exeRelated to ISC_BIND BIND (Berkeley Internet Name Domain) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. Note: Located in \%WINDIR%\System32\dns\bin\
    iSeries Access for Windows Remote Command (Cwbrxd)LCWBRXD.EXERelated to IBM Corporation.
    ISEXEngXangelex.exeBargain Buddy variant
    ISP Ampi ServiceXisampi.exeAdded by the W32/Tilebot-JJ WORM! Note: This worm is located in C:\%WINDIR%\ Read the link, allows remote access
    ISP Monitor (ISPMonitorSrv)LISPMonitorSrv.exeRelated to ISP_Monitor from How2 Studios. Monitor your connection, run speed tests and much more. Note: Located in \%Program Files%\ISP Monitor\
    ISS Buffer Overflow Exploit Prevention (VPatch)Lvpatch.exeRelated to IBM_ISS (Internet Security Systems) Note: Located in \%Program Files%\BlackIce\
    ISSI EZUpdate (ISSIMon)Lissimsvc.exeRelated to Ibm_Global_Services Used internally by IBM for automatic updating of software and microsoft patching Note: Located in c:\sdwork\
    ISSvc (ISSVC)LISSVC.exeRelated to Norton Internet Security
    Italian Grand PrixXgrand.exeAdded by the W32/Spybot-MK WORM! Note: C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K)

    Engine Version 2.0 by CastleCops

    spacer spacer