CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    BeatJam Music Server - UPnP (BeatJamUPnPMusicServer)LBeatJamUPnPService.exe See_BeatJam Justsystem audio software BeatJam.
    Belkin Wireless USB Network Adapter (Belkin Wireless
    USB Network Adapter Service)
    LWLService.exeRelated to Belkin's Wireless USB. Note: Located in \%Program Files%\Belkin\Belkin Wireless Network Utility\
    Bell & Howell Database Manager (dbmang)LDBMANG.EXERelated to Bell_and_Howell
    Bell & Howell Monitor Service (BHMonitorService)Lmonitor.exeRelated to Bell_and_Howell
    BelMonitor Service (BelMonitorService)LBANTMonitorSvc.exeRelated to Belarc, inc.
    BES Client (BESClient)LBESClient.exeRelated to BESClient by BigFix Inc
    BeTwin Terminal Services (TermService)Lwcsdmxp.exeRelated to BeTwin Terminal Services. Software that allows multiple users to simultaneously and independently share a personal computer. Note: Located in \%WINDIR%\System32\
    Beyond Remote ServerOBRServer.exeBeyond Remote Remote Legitimate, but allows remote access so should be removed if it was not intentionally installed
    BGS_SDServiceLBGS_SDservice.exeRelated BMC Software, Inc. - http://www.bmc.com/
    bh611LNT611SVC.EXERelated to Bell_and_Howell
    BigPond Broadband Cable LoginLbpcService.exeTelstra's BIGPOND_BROADBAND_CABLE
    Biometric Authentication Service (DpHost)LDpHost.exeRelated to DigitalPersona, Inc.
    BitDefender Communicator (XCOMM)Lxcommsvr.exeRelated to bitdefender Antivirus
    BitDefender Desktop Update Service (LIVESRV)Llivesrv.exeUpdate service for BitDefender_Antivirus
    BitDefender Scan Server (bdss)Lbdss.exeRelated to Bitdefender antivirus
    BitDefender Virus Shield (VSSERV)Lvsserv.exeRelated to bitdefender (Virusshield)
    Black Hole Professional Version (wmupdate)Xsvch0st.exeDetected as Backdoor.Win32.Ciadoor.123.d by Kaspersky
    Black Hole2005 Professional Version (Black Hole2005
    Professional)
    XQQ.exeAdded by the Troj/BlackHol-C TROJAN!
    Black Hole2005 Professional Version (Black Hole2005
    Professional)
    Xserver.exeAdded by the Troj/Singu-W TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
    BlackICELblackd.exeBlack Ice firewall
    Blink2PnPOSrvany.exeMicrosoft Windows application which allows an executable to be run as a service. If you have installed this service, fine, otherwise investigage. Can be used to load Malware. Note: located in \%WINDIR%\twain_32\SiPix\SCBlink2\
    Block Level Backup Engine Service (wbengine)Lwbengine.exePart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Blue Coat K9 Web Protection (WebFilter)Lk9filter.exeRelated to K9 Web Protection
    Bluesocket IPSec Service (BlueService)LBlueService.exeRelated to Bluesocket WLAN service. Note: Located in C:\Program Files\Bluesocket MS IPSec Config Tool\
    BlueSoleil Hid ServiceLBTNtService.exe BlueSoleil is a Bluetooth device manager for Windows. Made by the IVT_Corporation The file associated with this service is found in the Program Files\IVT Corporation\BlueSoleil folder.
    BlueSoleilCSLBlueSoleilCS.exeRelated to BlueSoleil Service. BlueSoleil allows your Bluetooth radio enabled desktop or notebook computer to wirelessly access a wide variety of Bluetooth enabled digital devices. Note: Located in \%Program Files%\IVT Corporation\BlueSoleil\
    BlueSoleilCS (audieqaac)Xlmgub.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Bluetooth Connect Support ServerXbtwdin.exeAdded by a variant of the IRCBOT Note: Located in \%WINDIR%\ Note: Use SDFix under supervision.
    Bluetooth Feature Support (BthFilterHelper)LBthFilterHelper.exeRelated to Bluetooth_Feature_Support by CSR. Note: Located in \%Program Files%\CSR\Vista Profile Pack\
    Bluetooth Notification Service (Btnfserv)Xbtserv.exeAdded by the W32/Sdbot-CSD WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Bluetooth Service (btwdins)Lbtwdins.exeBluetooth Service
    Bluetooth Stack COM ServerXBTStack.exe W32/Sdbot-DGV Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (XP/WinNT/2K) Allows others to access the computer
    boboLmomopanda platinium antivirus
    BOCoreLBOCORE.exeRelated to Comodo Personnal Firewall. Note: Located in \%Program Files%\Comodo\CBOClean\
    Boeing Permissions ElevatorLelevate.exeThe Boeing Company (internal use)
    Boingo Monitor ServiceLwmonitor.exeBoingo's Free_Wi-Fi_Software
    Bonjour ServiceLmDNSResponder.exeCreate's a network of computers and smart devices. Made by Apple Computer, Inc. For more information Click_Here File location is in the Program Files\Gizmo Project folder.
    BoolTern (BoolTern)Xsvch0st.exeAdded by the W32/Tilebot-U WORM! Note: This (svch0st.exe) is not the legitimate Windows process (Which is always found in the System32 folder, also notice the difference in the spelling.) The legitimate Windows process (svchost.exe) should not be seen in Msconfig or as a Startup item. This worm\trojan file is found in the Windows or Winnt folder. Read the link, rootkit type stealth involved.
    Boonty GamesXBoonty.exe Boonty_Games Used with Boonty box. Will not uninstall from Add/Remove programs. This is from their Privacy Policy. "We also may share payment information with third parties who provide payment services and share aggregate data regarding the type and number of videogames you download, your age, gender, occupation, education level, geographic location, computer equipment data and on-line and video game interests, activities and practices to game publishers. In addition, we share e-mail addresses with third party e-mail carriers who assist us in sending out our e-mails to many of our customers at the same time. Subsidiaries and controlled affiliates are not viewed as third parties for the purpose of data transfers, and hence personal information may be shared within those subsidiaries and affiliates without obtaining additional consent."
    Broadcom ASF IP and SMBIOS Mailbox Monitor (ASFIPmon)LAsfIpMon.exeRelated to Broadcom_ASF IP Monitor from Broadcom Corporation. Note: Located in \%Program Files%\Broadcom\ASFIPMon\
    Broadcom ASF IP monitoring service v3.0.1Lbasfipm.exeRelated to Broadcom communications - hardware.
    Broadcom ASF IP monitoring service v6.0.3 (BAsfIpM) Lbasfipm.exeRelated to Broadcom communications - hardware.
    Broadcom ASF IP monitoring service v6.0.4 (BAsfIpM)Lbasfipm.exeRelated to Broadcom communications - hardware.
    Broadcom Wireless LAN Tray Service (wltrysvc)Lwltrysvc.exeRelated to wireless networking for Broadcom wireless network cards
    Brother BidiAgent Service for Resource manager
    (brmfbags)
    LBrmfBAgS.exeRelated to Brother_BidiAgent Service products, from Brother Industries. Note: Located in C:\WINDOWS\System32\
    Brother Popup Suspend service for Resource manager
    (brmfrmps)
    LBrmfrmps.exeBrother printer related
    BrowserXsvchost.exe -k BrowserAdded by the Fuwudoor TROJAN!
    BrSplService (Brother XP spl Service)Lbrsvc01a.exerelated to Brother Industries Ltd
    BsHelpCSLBsHelpCS.exeRelated to BlueSoleil Service. BlueSoleil allows your Bluetooth radio enabled desktop or notebook computer to wirelessly access a wide variety of Bluetooth enabled digital devices. Note: Located in \%Program Files%\IVT Corporation\BlueSoleil\
    BT Auto Backup Service (VaultClientSRV)LVaultClientSRV.exeRelated to BT_Auto_Backup Service. Note: Located in \%Program Files%\BT Auto Backup\

    Engine Version 2.0 by CastleCops

    spacer spacer