CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.

This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Compaq Local AlerterLcpqalert.exeRelated to Compaq Computer. Allows for "fault, performance, and configuration management". Recommended for corporate users only.
    Compaq Local Alerter (CPQALERT)LCPQAlert.exeRelated to compaq products
    Compaq Presario SSHXcpsd.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This trojan is located in C:\Windows\System\dllcache (Win9x/Me), C:\%WINDIR%\System32\dllcache (XP/WinNT/2K)
    Compaq Remote Diagnostics Enabling AgentOCpqdfwag.exeRelated to Compaq diagnostics utility.
    Computer Browser (Browser)Lbrowser.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Compuware Open ServerLcwjboss.exeCompuware Serversoftware
    comreplXcomrepl32.exeAdded by the W32/Rbot-DNH WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    comreplXcomreplsvc.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    Config LoaderXscvhost.exeseveral Agobot variants
    ConfigFree Service (CFSvcs)LCFSvcs.exeToshiba related
    Configuration Loader (bF)Xwincrt32.exeVirus and Trojan tools. http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_AGOBOT.JP&VSect=Sn
    Configuration LoadingXsvchos1.exeseveral Agobot variants
    Connected Agent Service (AgentSrv)LAgentSrv.EXERelated to Connected Corporation. - http://www.connected.com/
    Connected LauncherLCBlaunch.exeConnected backup software
    Connected RegCapLCBRegCap.EXEConnected backup software
    Connection ReseXwebadmin.exeW32/Forbot-FY adds this, with a display name of Website Administrator Info.
    Content Index serviceLcisvc.exeMicrosoft Content Index service
    Content Monitoring ToolLmsCMTSrvc.exeCompaq CMTS
    ContentProtect (CwCpSvc20)Lcwsvc.exeRelated to ContentWatch Parental Control Internet Filter.
    Contivity VPN ServiceLExtranet_serv.exeRelated to Novel server.
    Contour Shuttle Device Engine (ShuttleEngine)LShuttleEngine.exeRelated to Contou_Design
    Control ServicesXexpl0rer.exe Win-Trojan/BlackHole.125440
    Control Task ManagerXcvsys.exe Added by an unidentified TROJAN! Note: of the IRC/bot Family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    COSIDS_TBLTbMux32.exeRelated to http://www.transaction.de/
    costeOmartinr.coste@neuf.frantivirus
    CounterSpyAgentLSBCSESvc.exeRelated to CounterSpyAgent From Sunbelt Software. Note: Located in \%Program Files%\System32\Sunbelt Software\CounterSpy\Agent\
    Cox High Speed Internet Security Suite System Service
    (AuthSysSvc)    		LSysSvcNt.exeRelated to Cox High Speed Internet Security Suite System Service. Note: Located in C:\Program Files\Cox\Applications\app\
    cpanelx (Microsoft Control Panel)Xcpanelx.exeAdded by a variant of the W32/SDBOT WORM! Note: This worm file is found in the Windows or Winnt folder.
    cpqdmiLcpqdmi.exeCompaq version of the Desktop Management Interface
    CPUCooLServer Service (CPUCooLServer)LCooLSrv.exePart of CPUCooL
    CQG Installation ServiceLcqginsts.exeRelated to CQG, Inc. CQG provides extensive historical data online for charting and technical analysis.
    crautoLcrauto.exeBackground task of the Paragon Encrypted Disk software which enables you to have encrypted virtual hard disks to store sensitive data. (answers that work)
    Creative ALchemy AL1 Licensing ServiceLAL1Licensing.exeRelated to Creative_ALchemy EAX® and 3D Audio restoration in Windows Vista. Note: Located in \%Program Files%\Common Files\Creative Labs Shared\Service\
    Creative Audio Pack Licensing ServiceLAPLicensing.exeRelated to Creative_Audio_Pack Licensing Service. Note: Located in \%Program Files%\Common Files\Creative Labs Shared\Service\
    Creative Audio Service (CTAudSvcService)LCTAudSvc.exeRelatedt to Creative_Audio_Service from Creative Technology. Note: Located in \%Program Files%\Creative\Shared Files
    Creative Labs Licensing (udavaaelyeev)Xwbtqacmhmbv.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Creative Labs Licensing ServiceLCreativeLicensing.exeRelated to Creative Labs Licensing Service. Note: located in C:\Program Files\Common Files\Creative Labs Shared\Service\
    Creative Service for CDROM AccessLCTsvcCDA.exeCreative Service for CDROM Access
    Creative Solutions Accounting Print Service
    (CSAPrintService)    		Lcsasvc.exeRelated to Creative_Solutions_Accounting Print Service from Creative Solutions. Note: located in \%WINDIR%\
    CREDANT Mobile Guardian Gatekeeper (guardian)LGatekeeper.exeRelated to Credant_Technologies data encryption software for laptop and USB encryption to CD-DVD recorders, iPods and Smart Phones. Note: Located in \%WINDIR%\System32\
    crss32.exeXcrss32.exeAdded by the W32/Tilebot-GT WORM! Note: This worm\trojan is located in C:\%WINDIR%
    Crypkey LicenseLcrypserv.exeCrypKey Software Licensing System from Cobalt Systems
    Cryptainer service (ssoftservice)Lssoftsrv.exeOwner:Cypherix Cypherix Encryption Software
    Cryptic Protected Storage (CryptProtectedService)Xcpstorage.exeAdded by the W32/Tilebot-HO WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Cryptographic Engine (EngSvc)Xcsvc.exeAdded by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Cryptographic Services (CryptSvc)Lsvchost.exe -k NetworkServicePart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Crystal APS (CrystalAPS)LCrystalAPS.exeRelated to Crystal_APS Now owned by Business Objects. Note: Located in C:\Program Files\Seagate Software\Enterprise\x86\
    Crystal Cache Server (CacheServer)Lcacheserver.exe Crystal_Decisions_Cache_Server Now owned by Business Objects
    Crystal Event ServerLEventServer.exeCrystal Decisions Event Server
    Crystal Input File Repository Server
    (CrystalInputFileServer)    		Linputfileserver.exe Crystal_Decisions_File_Repository_Server Now owned by Business Objects.
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    136ppm 0.100s (0.011s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer