CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.

This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Network Location Awareness (Network Location)XNetwork.exe Troj/Dloadr-BBE Copies itself to %Common Files%\Microsoft Shared\MSInfo\
    Network Location ManagerXlssc.exeAdded by the Trojan.Backdoor.Gen TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Network Management Center Time (W32Times)XTIMEMAN32.EXEAdded by the Troj/GrayBrd-AA TROJAN! Note: This worm\trojan file is found in the Program Files\Internet Explorer\plugins folder.
    Network Messenger (MStdc )Lmstdc.exeRelated to Microsoft Personal Web Server and Microsoft SQL Sever software http://www.2-files.com/process/microsoft-distributed-transaction-coordinator
    Network MonitorXnetmon.exeReported by Panda as the Trj/Cicos.H TROJAN! This trojan if found in the \Program Files\Network Monitor\ folder. Note: This is not the legitimate Microsoft Network Monitor (Netmon.exe) process which is legitimate to capture network traffic. Article_Q812953
    Network Provision Managing Service (xmlprovman)Xprovsvc.exeAdded by the W32/Sdbot-CRS WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Network Security ServiceXrandomCoolWebSearch res:// variant
    Network Security Service (NSS)XrandomCoolWebSearch res:// variant
    Network Security Service (__NS_Service_3)Xsdkbj32.exeDetected as Trojan.Agent.bi by ewido(now known as AVG-antispyware)
    Network Source Engine (NSEsvc)Xnsecvc.exeIdentified by Bitdefender as Trojan.Peed.Gen Note: located in \%WINDIR%\Help\
    Network Station Task Manager (TASKSQ)Xtasksch.exeAdded by an unknown variant of a backdoor TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\
    Network Station Task Manager (TSKIB)Xtaskib.exeAdded by an unknown variant of a backdoor TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\
    Network Switching AlerterXwindlls.exeProbable variant of W32/Rbot-AZQ
    Network System (NetSystem)XNetSystem.exe Troj/QQRob-ADE Read the link, steals information
    Network System Logon (NSLSVC)Xnetmsvc.exeAdded by a variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Note: located in \%WINDIR%\Cursors\
    Network Translation System Service (NTSS)Xntss.exeAdded by the Backdoor.Unpdoor backdoor Trojan. A Trojan horse that opens a random port and connects to a remote Web site. Note: located in \%WINDIR%\System32\
    NetWorker Power Monitor (nsrpm)Lnsrpm.exeRelated to NetWorker_Power Monitor from LEGATO Software. Note: Located in \%Program Files%\nsr\bin\
    NetWorker Remote Exec Service (nsrexecd)Lnsrexecd.exeRelated to NetWorker_Remote Exec Service from LEGATO Software. Note: Located in \%Program Files%\nsr\bin\
    NetWorkLogonXKB8964225.log Troj/Lmir-FF Note: Located in %windir%\system32 Read the link, steals information
    NI Configuration Manager (mxssvr)Lnimxs.exeRelated to NI_Configuration_Manager from National Instruments Corp. Note: Located in \%Program Files%\National Instruments\MAX\
    NI Service Locator (niSvcLoc)LniSvcLoc.exeRelated to National_Instruments corp.
    Nicrosoft f11ntXvvvhost.exeAdded by a variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Note: located in \%WINDIR%\system32\dllcache\
    NICSer_G200v2LNICServ.exeRelated to Linksys config utility.
    NICSer_WMP11LNICServ.exeRelated to Linksys config utility.
    NICSer_WPC54GLNICServ.exeRelated to Linksys config utility. Note: Located in \%Program Files%\Linksys\Wireless-G Notebook Adapter\
    nidevlduLnipalsm.exeRelated to National_Instruments Inc. Note: Located in \%WINDIR%\System32\
    NILM License ManagerLlmgrd.exeRelated to the Macrovision License Manager.
    NinjaVideo Helper (NinjaVideo Helper.exe)LNinjaVideo Helper.exeRelated to NinjaVideo_Helper is required in order to view videos on NinjaVideo.net. Note: Located in \%Program Files%\NinjaVideo\NinjaVideo Helper\
    ninsvcXninsvc.exeAdded by the W32/Akbot-AL WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Modifies the HOSTS file
    nipxirmuLnipalsm.exeRelated to National_Instrument Corp.
    NkPtpEnumP2LNkPtpEnum.exeRelated to Nikon Wireless Camera Setup utility. Note: Located in \%Program Files%\Nikon\Wireless Camera Setup Utility\
    NMapLnmapserv.exeNMapWin Port Scanner utility service.
    NMIndexingServiceLNMIndexingService.exePart of a Nero product
    NMSAccessLNMSAccess.exeRelated to Cheetah_DVD_Burner Note Must only be used on NT4/2000/XP
    NMSAccessULNMSAccessU.exeRelated to CDBurnerXP a free application to burn CDs and DVDs. Note: Located in \%Program Files%\CDBurnerXP\
    nMtskBar Service (nMtskService)?nMtsk.exeTaskbar control for ISDN NetMod modem
    NMU Emergency Broadcast System (nmuebs)Lnmuebs.exeRelated to Northern_Michigan_University On-line services. Note: Located in \%ROOT%\nmutools\
    NNServXnnrun.exeAdded by NewDotNet AdWare! Note: Located in C:\Program Files\NewDotNet\
    NNSvcLnnsvc.exeNetNanny Internet Filter
    NobleNet Portmapper for TCPLportserv.exe Actuate_Enterprise Reporting Applications for business intelligence analytic services
    NOD AV service (nodantivir)Xnodantivir.sysAdded by the Troj/Haxdoor-AK TROJAN! Note: This trojan file is found in the System32 folder. The file nodantivir.sys provides stealthing functionality.
    NOD32 Kernel Service (NOD32krn)Lnod32krn.exeNOD32 Antivirus
    Nofeel FTP Server ServiceLnftpdsvc.exeRelated to Nofeel_FTP_Server
    NoIPDUCServiceLDUC20.exeRelated to Vitalwerks Internet Solutions
    Norman API-hooking helper (NipSvc)Lnipsvc.exeNorman Anti-Virus
    Norman eLogger service 6 (eLoggerSvc6)LELOGSVC.EXERelated to Norman_eLogger Internet Control. Note: Located in \%ROOT%\Norman\Npm\bin\
    Norman NJeevesLNJEEVES.EXENorman Anti Virus
    Norman Type-RLNPFSVICE.EXENorman Virus Control Service. Made by Norman Data Defense Systems, Inc. For more information Click_Here File is located in the Norman\Nvc\BIN folder.
    Norman Virus Control on-access component (nvcoas)Lnvcoas.exeNorman Virus Control on-access component
    Norman Virus Control Scheduler (NVCScheduler)LNVCSCHED.EXENorman Virus Control Scheduler
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    195ppm 0.095s (0.006s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer