CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Skype Messenger (Skype)Xskype32.exeAdded by the W32.Mytob.ML WORM! Note: This worm file is found in the System32 folder. Read the link, rootkit type stealth involved.
    SleepyLservice.exeRelated to Sashazur LLC A utililty to prevents computer use at night. For schools, libraries, businesses etc.
    SlimServer (slimsvc)Lslim.exeRelated to SlimServer Note: Located in C:\Program Files\SlimServer\server\
    SlimServerMySQLLmysqld.exeRelated to Slimserver
    SLMDriver (SLMDriver)Xslm32.sysAdded by the Troj/Rootkit-AA TROJAN! Note: This trojan file is found in the System32 folder. Read the link, rootkit type stealth involved.
    SLPMONXLslpservice.exeRelated to Seiko Printers. Provides additional configuration options for these devices. Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    slysomXslysom.exeAdded by a variant of the RBOT family of IRC Backdoor trojan. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    SMART Board ServiceLSMARTBoardService.exeRelated to SMART Technologies inc.
    Smart Card Client (SCardClnt)XSCardClnt.exeAdded by the W32/Codbot-K WORM! Note: located in C:\Windows\System (Win9x/Me), C:\Winnt\System32 (XP/WinNT/2K)
    Smart Card HelperXscardsvr32.exeAdded by the W32.Femot_worm! . NOTE: do not confuse this with the legitimate Smart Card Helper service, which uses the filename SCardSvr.exe!
    Smart Card Reader Helper (scrhcust)Xsvchost.exe Troj/Zapchas-DO Note: Located in %Root%\RECYCLED\S-1-5-21-3252328098-71414409-2463015037-500\ Allows others to access the computer
    Smart Card Supervisor (mmc)Xmmc.exe W32/Dzan-A Read the link, allows remote access
    SMART Web ServerLWebServer.exeRelated to SMART_Web_Server from SMART Tech. Inc. Transform your classroom with SMART education solutions. Note: Located in \%Program Files%\SMART Technologies Inc\SMART Board Software\
    SmartGenie (LxrSGe10s)LLxrSge10s.exeRelated to SmartGenie_toolbar customizable toolbar, offers many helpful research tools making it possible for you to navigate the Web as well as carry out powerful research.
    SmartLinkServiceLslmdmsr.exeslmdmsr.exe installed alongside Smartlink communication products and offers additional support to the modem service. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
    SmartLinkService (SLService)Lslserv.exe slserv.exe is installed alongside Smartlink communication products and offers additional support to the modem service. This program is a non-essential process, but should not be terminated unless suspected to be causing problems.
    SmartTrust Smart Card Server (Smartscaps)LSmartscaps.exePlatform for integrating security functions with mobile services. For more information Click_Here
    SmartWiServiceLSmartWiService.exeRelated to Sony_SmartWi SmartWi technology is the seamless integration of three wireless technologies: Wide Area Network (WAN)132, 802.11bg wireless LAN1, and Bluetooth®4 technologies.
    SMBus Upgrade Service for Windows 2000 and above
    (ibmsmbus)
    Libmsmbus.exeRelated to SMBus on IBM computers. SMBus is the System Management Bus defined by Intel® Corporation in 1995. It is used in personal computers and servers for low-speed system management communications. Note: located in C:\WINDOWS\System32\ibmsmbus.exe
    SMONITORXSMONITOR.SYSAdded by the TROJ_ROOTKIT.V TROJAN! Read the link, rootkit type stealth involved.
    SMS Agent Host (CcmExec)LCcmExec.exeRelated to SMS_Agent (CCM) = change and configuration management. Note: Located in \%WINDIR%\System32\CCM\
    SMS Help Center (SMS32)Xsmss32.exeAdded by an unknown variant of a backdoor TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\
    smscXsmsc.exeAdded by the W32/Tilebot-GW WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    smsccXsmscc.exeAdded by the W32/Sdbot-CPG WORM! Note: This worm\trojan is located in C:\%WINDIR%
    smsmangerXsmsmanger.exeAdded by the Backdoor.SdBot.xd as identified by ewido. Note: This worm\trojan is located in C:\%WINDIR%\ More: here
    SMSS (SMSS)Xsmss.exeAdded by the W32/Tilebot-V WORM! Note: This worm file is found in the Windows or Winnt folder.
    SMTP CaptureLsmtpcap.exeRelated to NSi's AutoStore from Notable Solutions, Inc. Capture documents and securely saving the content in your business applications.
    Snake SockProxy Service (SkServer)Xwuauserv.exeVariant of Troj/VB-ZD See Sophos
    SNARELSnareCore.EXERelated to InterSect_Alliance Open Source agents to provide a log collection, analysis, reporting and archival resource.
    SnareIISLSnareIIS.EXERelated to InterSect_Alliance Open Source agents to provide a log collection, analysis, reporting and archival resource.
    SndDRV (MS Sound Driver) (SndDRV)Xsnddrv.exeAdded by the W32/Rbot-BSC WORM! Note: This worm file is found in the System32 folder.
    SNM WLAN ServiceLSNMWLANService.exeRelated to Network_Manager from Samsung. Note: Located in \%Program Files%\samsung\Samsung Network Manager\
    SNMPTrapd Service (SNMPTrapdService)Lsnmptrapd.exeRelated to MKS_Toolkit
    Snoop Free Service (SnoopFreeSvc)LSnoopFreeSvc.exeAnti-keylogging software made by SnoopFree_Software._
    Socks-Cap (Sc32Inch)XSc32Inch.exeAdded by WORM_SDBOT.DIN WORM! Rookit infection Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    soft Xpansion MSO2PDFLmso2pdf-serv.exeRelated to soft_Xpansion provides for applications an ability to use digital documents in PDF format, incl. PDF/A. Note: Located in \%Program Files%\soft Xpansion\Office to PDF\
    Softex OmniPass Service (omniserv)LOmniserv.exeRelated to Softex OmniPass security solution which handles passwords on your computer.
    SoftGrid Client (sftlist)Lsftlist.exeRelated to SoftGrid from Microsoft. A core component of the Desktop Optimization Pack for IT professionals. Note: Located in \%Program Files%\Softricity\SoftGrid for Windows Desktops\
    SoftGrid Virtual Service Agent (sftvsa)Lsftvsa.exeRelated to SoftGrid from Microsoft. A core component of the Desktop Optimization Pack for IT professionals. Note: Located in \%Program Files%\Softricity\SoftGrid for Windows Desktops\
    Software Jukebox v2.0 ServiceLSoftware Jukebox v2.0 Service File.exeRelated to BlueLabelle Jukebox v2.0 from MPEGX.com
    Software Secure Service (SSISvr32)Lssisvr32.exeRelated to Software_Secure service. Enables students to take an exam in a secure environment using Microsoft® Word and Excel. Note: Located in C:\WINDOWS\system32\
    SolidPDFConverterReadSpool (ScReadSpool)LSolidPdfService.exeRelated to Solid_Converter_PDF from VoyagerSoft - Turn your PDFs into documents you can edit.
    SolidWorks Licensing Service (audieqaai)Xlmguh.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Sonica Theater Installer
    (SonicaTheaterInstallerService)
    LSTinst.exeRelated to Sonica_Theater from M-Audio. Turn your computer into a fully functional multiformat surround-sound monitoring environment. Note: Located in C:\Program Files\C:\Program Files\M-Audio Sonica Theater\Install\
    SonicStage Back-End ServiceLSsBeSvc.exeRelated to Sonic Stage Back-End service from SONY. Note: Located in \%Program Files%\Common Files\Sony Shared\AVLib\
    SonicStage SCSI Service (SSScsiSV)LSSScsiSV.exeRelated to Sony Corp.
    SonicStageMonitoringLSonicStageMonitoring.exeRelated to Sony GigaPocket multimedia entertainment center.
    SonicWALL Agent ServiceLswAgent.exeRelated to Network Associates, Inc.
    SonicWALL NetExtender Service (SONICWALL_NetExtender)LNEService.exeRelated to SonicWALL_NetExtender Service from SonicWall Inc. Note: Located in \%Program Files%\SonicWALL\SSL-VPN\NetExtender\
    SonicWall VPN Client Service (RampartSvc)LRampartSvc.exeSonicWall client for VPN access.

    Engine Version 2.0 by CastleCops

    spacer spacer