CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Norman ZANDALZanda.exeNorman Anti Virus
    Nortel CVC Service (NvcRpcServer)LNvcRpcSvr.exeRelated to Nortel_CVC Service. Service - VNP Client. Note: Located in \%Program Files%\Nortel Networks\
    Nortel Networks i2050 QoS Service (i2050QoSSvc)Li2050QosSvc.exeRelated to Networks_IP_Softphone from Nortel Note: located in \%WINDIR%\system32\
    Nortel Networks TunnelGuard (tunnelguardservice)LCueAgent_srv.exeRelated to Nortel_Networks_TunnelGuard designed to ease the deployment of very large site-to-site and remote access Virtual Private Networks (VPNs). Note: Located in C:\Program Files\Nortel Networks\TunnelGuard\
    Norton antivirus and Firewall (it)Xfime.exeBogus Norton Antivirus and Firewall service. Unknown owner.
    Norton AntiVirus Auto Protect Service (navapsvc)Lnavapsvc.exeRelated to Norton/Symantec AntiVirus.
    Norton AntiVirus Auto-Protect Service (navapsvc)Lnavapsvc.exeRelated to Norton/Symantec AntiVirus.
    Norton AntiVirus Auto-Protect-Dienst (navapsvc)Lnavapsvc.exeRelated to Norton/Symantec AntiVirus.
    Norton AntiVirus Auto-Protect-service (navapsvc)Lnavapsvc.exeRelated to Norton/Symantec AntiVirus.
    Norton AntiVirus Client (Norton AntiVirus Server)Lrtvscan.exeNorton Anti-virus related
    Norton AntiVirus Firewall Monitor Service (NPFMntor)LNPFMntor.exeNorton Internet Worm Protection
    Norton GhostLPQV2iSvc.exesymantec Norton Ghost Image related
    Norton GhostLVProSvc.exeRelated to symantec Norton Ghost Image. Note: Located in \%Program Files%\Norton Ghost\Agent\
    Norton Internet Security Accounts Manager (NISUM)LNISUM.EXERelated to Norton Internet Security
    Norton Internet Security Professional Accounts Manager
    (NISUM)
    LNISUM.EXERelated to Norton Internet Security
    Norton Internet Security Proxy Service (SymProxySvc)LSymProxySvc.exeRelated to Symantec Corporation
    Norton Internet Security ServiceLNISSERV.EXERelated Symantec Corporation
    Norton Online Anti VirusXavll32.exeAdded by the Backdoor.Win32.SdBot.aad reported by Kaspersky TROJAN! Note: This worm\trojan is located in C:\%WINDIR%
    Norton Personal Firewall Proxy ServiceLSymProxySvc.exeRelated to Norton Firewall Proxy service
    Norton Personal Firewall ServiceLNISSERV.EXERelated to Norton Personal Firewall service
    Norton Program SchedulerLnpssvc.exeRelated to Norton Scheculer
    Norton Protection Center Service (NSCService)LNSCSRVCE.EXERelated to Norton Internet Security 2006 and Norton AntiVirus 2006. Made by Symantec_Corporation
    Norton Save and RestoreLVProSvc.exeRelated to Symantec Norton Ghost Note: Located in C:\Program Files\Norton Save and Restore\Agent\
    Norton UnErase Protection (NProtectService)LNPROTECT.EXENorton Protected Recycle Bin
    Notebook Manager Service (anbmService)LanbmServ.exeRelated to Acer Notebooks Hardware Monitoring program. Made by OSA_Technologies Inc.
    Notebook Performance Tuning Service
    (TempoMonitoringService)
    LTempoSVC.exeRelated to Toshiba_TEMPO It will advise you on how to fine-tune the performance of your notebook and keep you informed of the latest Toshiba software and driver updates as soon as they are released. Note: Located in \%Program Files%\Toshiba TEMPO\
    NOTEPADXnotepad.exe W32/Sdbot-DHU Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (Vista/XP/WinNT/2K) Allows others to access the computer
    Novell Application Launcher (NALNTSERVICE)LNALNTSRV.EXENovell NAL NT service
    Novell Workstation Manager (WM)Lwm.exeNovell Workstation Manager
    Novell XTier Agent Services (XTAgent)LXTAgent.exeRelated to Novell, Inc. \%WINDIR%\System32\Novell\
    Novell XTier Service Manager (XTSvcMgr)LXTSvcMgr.exeRelated to Novell Inc. Note: Located in \%Program Files%\Novell\Client\XTier\Services\
    Novell ZfD Remote ManagementLZenRem32.exe
    Novell ZfD Wake on LAN Status Agent (Prometheus
    Wake-On-LAN Status Agent)
    LWolSerNT.exeNovell ZfD Wake on LAN Status Agent
    Now.WAP Proxy Gateway Service (WAP3GX)LWAP3GXNT.EXERelated to Now.WAP_Proxy a WAP Gateway that is designed to meet the needs of WAP 2.0 and multimedia applications. Note: Located in C:\PROGRAM Files\NowWAP\
    NPDOR File Monitor Service (NFMService)LNPDORNT.exeRelated to NPD Online Research.
    NPFXnpf.sysAdded by the Troj/NtRootK-I TROJAN! Note: This trojan file is found in the System32 folder.
    npkcmsvcLnpkcmsvc.exeRelated to KeyCrypt Encryption Manager Service from INCA Internet Co. Note: Located in \%WINDIR%\System32\
    npkcsvcLnpkcsvc.exeINCA Internet
    NS (MSLLR)Xns.exeW32/Agobot-HS
    NSC Agent (NSDUAgent)LNSCAGENT.EXERelated to NSC_Agent service from Symantec. Note: Located in \%ROOT%\NAgent\
    NsEngineLNSENGINE.exeScheduling engine of NovaSTOR Backup Service
    nserviceXnservice.exeAdded by the W32/Agobot-AHR WORM! Note: This worm is located in C:\%WINDIR%\System32\ (XP/WinNT/2K) Read the link, allows remote access
    nsssvcXisssvc.exe Troj/Agent-BIY Note: Located in :\Program Files\W3CS
    NSUServiceLNSUService.exeA network utility for Sony laptops see here Note: Located in \%Program Files%\Sony\Network Utility\
    NT LM Security Support Provider (NtLmSsp)Llsass.exeRelated to the NT_LM_Security_Support_Provider Windows NT 4.0 is responsible for handling NTLM authentication requests. Note: Located in C:\%WINDIR%\System32\
    NT login service (ntlogin32)Xlibsys32.exeAdded by the W32/Sdbot-ACK WORM!
    NT login service - UnknownXlibsysmgr.exeAdded by the W32/SDBOT-CAF WORM! (Castle Cops)
    NT Online ProtectionLONLNSVC.EXERelated to AntiVirus_Quick Heal Virus protection. Note: located in C:\Program Files\QUICKH~1\
    Nt System KernelXntsyskrnl.exerelated to WORM_AGOBOT.IK
    NTBOOTMGR (NTBOOT)Xntuser.exeFlagged as Backdoor.Iroffer / Backdoor.Noer

    Engine Version 2.0 by CastleCops

    spacer spacer