CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.

This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    serviceMangr (tcphost.exe)XTCPHOST.EXEAdded by the SDBOT.CSG WORM! Read the link, rootkit type stealth involved.
    servicesXservices.exe W32/Sdbot-CXP Note: Located in %windir% Read the link, allows remote access
    Services (Ini Service Ku)Xservices.com Troj/Winlock-C
    Services an controller-settingsXservices.exeAdded by the W32/Tilebot-HY WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    Services Manager (svcmngr)Xconfig.exe Troj/DllLoad-C Read the link, steals information
    services32 (Content List Management Sub System)Xservices32.exeAdded by the W32/Esbot-B WORM! Note: This worm\trojan file is found in the Windows or Winnt folder.
    Servicess_ServerXServicess.exeA variant of the Feutel/Hupigon infection. Note: rootkit type stealth involved.
    Servicio Auto-Protect de Norton AntiVirus (navapsvc)Lnavapsvc.exeRelated to Norton/Symantec AntiVirus.
    Servicio Bonjour (Bonjour Service)LmDNSResponder.exeCreate's a network of computers and smart devices. Made by Apple Computer, Inc. For more information Click_Here File location is in the Program Files\Gizmo Project folder.
    Servicio COM de grabacióe CD de IMAPILimapi.exeRelated to Image_Mastering_Applications_Programming_Interface from Microsoft used for CD recording. Note: Located in C:\WINDOWS\System32\
    Servicio COM de grabación de CD de IMAPI (ImapiService)Limapi.exeRelated to Image_Mastering_Applications_Programming_Interface from Microsoft used for CD recording. Note: Located in C:\WINDOWS\System32\
    Servicio de alertaLservices.exeSpanish Windows 2000 alert service.
    Servicio de ayuda TCP/IP NetBIOSLservices.exeSpanish Windows 2000 Help service TPC/IP NetBIOS
    Servicio de faxLfaxsvc.exeSpanish Windows 2000 fax service
    Servicio de uso compartido de red del Reproductor de
    Windows Media (WMPNetworkSvc)    		Lwmpnetwk.exeRelated to Windows_Media_Player Network Sharing Service.Note: Located in %ProgramFiles%\Windows Media Player\
    Servicio del administrador de discos lóosLdmadmin.exeSpanish Windows 2000 logical disk manager administrative service
    Servicio del administrador de discos lógicos (dmadmin)Ldmadmin.exeRelated to Veritas logical disk manager
    Servicio del iPod (iPod Service)LiPodService.exeRelated to Apple iPod.
    Servicio RunAsLservices.exeSpanish Windows 2000 RunAs service
    Serviço iPod (iPod Service)LiPodService.exeRelated to Apple iPod.
    ServidorLservices.exeSpanish Windows 2000 "server"
    Servidor de RPC de eTrust Antivirus (InoRPC)LInoRpc.exeAssociated with eTrust Antivirus/InoculateIT
    Servidor de tareas de eTrust Antivirus (InoTask)LInoTask.exeAssociated with eTrust Antivirus/InoculateIT
    Servidor de tiempo real de eTrust Antivirus (InoRT)LInoRT.exeRelated to eTrust's AntiVirus Internet Security solution.
    Servies Unknow SrvX001.exe Win-Trojan/Downloader.6656.DW
    Servizio iPod (iPod Service)LiPodService.exeRelated to Apple iPod.
    Servizio Norton AntiVirus Auto-ProtectLnavapsvc.exeRelated to Norton Antivirus
    sessionsimXsssnsml.exe Troj/Dloadr-BBB Also creates an additional service "typemgr2"
    settingsXSETTINGS.EXEAdded by the SDBOT.CHY WORM! Read the link, rootkit type stealth involved.
    SF FrontLine Drivers Auto Removal (v1) (sfrem01)Lsfrem01.exeRelated to SF_FrontLine Drivers Auto Removal from Star-Force. Note: Located in C:\WINDOWS\system32\
    SFTRANSFER (SFTRANSFER)X(Unknown at this time.)Added by the Backdoor.Brakkeshell TROJAN! Note: In the Description field under Services it wil show as: Secure file transfer protocol
    SFUSVCLSFUSVC.exe KYOCERA_MITA Scanner File Utility used with Kyocera Mita scanners/faxes. Note: located in C:\Program Files\Kyocera Mita\FileUtility\
    SgeCtlLSGECTL.EXEUtimaco Safewares SAFEGUARD
    Sharing Messenger Folders Windows XP (SMFWX)Xbhagent.exe W32/Sdbot-CZS Note: Located in %windir% Read the link, allows remote access
    Sharp Device Manager ServiceLsdmservice.exeRelated to Sharp_Device_Manager printer service form Sharp. Note: Located in \%Program Files%\sharp\sharp device manager\
    SharpAccountant2LSharpAccountant2Service.exeRelated to Sharp_Device_Manager printer service form Sharp. Note: Located in \%Program Files%\sharp\SharpAccountant2\
    Shavlik HFNetChkPro ServiceLHFNetChkProService.exeHFNetChkPro distributes Microsoft patches to client machines
    SHDSERVLshdserv.exe Horizon DataSys Rollback Rx
    Shiva VPN ClientLicsrv.exeRelated to Eicon Networks Corporation
    SHOVEXSHOVE.exe Troj/Agent-EOM
    SigmaTel Audio Service (STacSV)Lstacsv.exeRelated to SigmaTel_Audio_Service Part of the C-Major Audio driver. Note: Located in C:\Program Files\SigmaTel\C-Major Audio\WDM\
    Sigmatel PassThru (PassThru)Lpassthru.exeRelated to Sigmatel
    SiS WirelessLan Service (SiSWLSvc)LSiSWLSvc.exeRelated to Sis_Wireless_Lan LAN controller
    SiSoftware Database Agent Service (SandraDataSrv)LRpcDataSrv.exeRelated to Sandra_Lite from SiSoftware Ltd. System benchmarking software. Note: Located in \%Program Files%\SiSoftware\Win32\SiSoftware Sandra Lite XI.SP2\
    SiSoftware Deployment Agent Service (SandraAgentSrv)LRpcAgentSrv.exeRelated to SiSoftware_Deployment_Agent service. An information & diagnostic utility. Note: Located in \%Program Files%\SiSoftware\SiSoftware Sandra Lite XII.SP2c\
    SiSoftware Sandra Agent Service (SandraTheSrv)LRpcSandraSrv.exeRelated to Sandra_Lite from SiSoftware Ltd. System benchmarking software. Note: Located in \%Program Files%\SiSoftware\SiSoftware Sandra Lite XI.SP2\
    Sistema de ayuda de tarjeta inteligenteLSCardSvr.exeThe application belonging to the Microsoft Windows Operating System, which provides the authentication facilities for smart security cards on your local system.
    SiteAdvisor ServiceLSAService.exeRelated to SiteAdvisor Service from McAfee. Note: Located in C:\Program Files\SiteAdvisor\[4 digits number\
    SiteMinder Authentication Service (SmServAuth)LService_AuthSrvr.exeRelated to Cold_Fusion from Macromedia, inc.
    SiteMinder Authorization Service (SmServAz)LService_AzSrvr.exeRelated to Cold_Fusion from Macromedia, inc.
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    163ppm 0.125s (0.012s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer