CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.

This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    DB2 License Server (DB2LICD)Ldb2licd.exeRelated to DB2_Universal_Database Processes from IBM. Note: Located in \%Program Files%\IBM\SQLLIB\BIN\
    DB2 Remote Command (DB2REMOTECMD)Ldb2rcmd.exeRelated to IBM Corp.
    DB2 Security Server (DB2NTSECSERVER)Ldb2sec.exeRelated to IBM Corp.
    DB2DAS - DB2DAS00Ldb2dasrrm.exeIBM DB2 related. The DB2 Admin Server process. This process supports both local and remote administration requests using the DB2 Control Center.
    dbglgXdbglg.exe Troj/Dloadr-BAJ
    DcfssvcLdcfssvc.exeAssociated with digital cameras and can cause problems which disappear if disabled. If this program is unchecked in startup, your camera will not cause your computer to open a pop-up window when you connect it. Leave enabled if you can\'t load pictures from your camera/dock - Kodak\'s dock is an example
    Dcom Helper (DcmHlp)Xdcmhelp.exeAddec by the W32/Sdbot-AJA WORM! Note: This worm\trojan is located in C:\%WINDIR%\
    DCOM PC Service (mspcdcom)Xmspcdcom.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    DCOM Server Process Launcher (DcomLaunch)Lsvchost.exe -k DcomLaunchPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    DCPFLICSLDCPFLICS.exeRelated to: Discreet Turbosquid/3dsmax Plugin Protection
    DCS Loader (DCSLoader)LOPHALDCS.EXEPrint spooler service for Oki_Data printer
    dcznetv2 (dcznetv2)Xdcznetv2.exeAdded by the W32/Tilebot-O WORM! Note: This worm/trojan file is found in the Windows or Winnt folder. Read the link, rootkit type stealth involved.
    DDE de redLnetdde.exeSpanish Windows 2000 network DDE
    Dds Scheduler Deamon (DdsSched)Lddsschednt.exeRelated to Ricoh Document System Server Information Service. Note: Located in \%Program Files%\RDS\
    Debug Config SystemXlrsys.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) More here
    Debug System ManagerXspoolvc.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Deepsight ExtractorLExtractorService.exeSymantec Security Analyser
    DeepSight Extractor CC ServiceLccExtractorService.exeRelated to Symantec Virus protections software.
    DeepSight Extractor Service for NP08 (audieqaae)Xlmgud.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    DeepSight Extractor Service for NPF03LExtractorServiceNPF03.exeSymantec Security Analyser
    DeepSight Extractor Service for NPF04LExtractorServiceNPF04.exeSymantec Security Analyser
    Defragmentation Management Handler (FAT
    Defragmentation)    		Xdfrgfat32.exeAdded by the W32/Codbot-AB WORM! Note: This worm\trojan file is found in the System32 folder.
    DefWatchLdefwatch.exeSymantec Antivirus related
    Dell Internal Network Card Power Management
    (nicconfigsvc)    		LNICCONFIGSVC.exeNICCONFIGSVC.exe is a process associated with the power management settings for network adapters on Dell systems. For more information Click_Here
    Dell Printer Status Watcher (audieqaaf)Xlmgue.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Dell Printer Status Watcher (DLPWD)LDLPWDNT.EXERelated to Dell_Printers Note: Located in C:\Program Files\Dell Printers\Additional Color Laser Software\Status Monitor\
    Dell Wireless WLAN Tray Service (wltrysvc)LWLTRYSVC.EXE Related to wireless networking for Broadcom wireless network cards, found on Dell PCs
    DellAMBrokerServiceLbrkrsvc.exeRelated to Dell Support
    DellDmiLDellDmi.exeRelated to Dell's OpenManage software.
    Desktop Window Manager Session Manager (UxSms)Lsvchost.exe -k LocalSystemNetworkRestrictedPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    DEventAgentLEventAgt.exeRelated to: Dell OpenManage and used for server management.
    DEVICEMAPXDEVICEMAP.SYSAdded by the TROJ_ROOTKIT.O TROJAN! Read the link, rootkit type stealth involved.
    DevNotifySvcLDevNotifySvc.exeRelated to DevNotifySvc USB to Serial Adapter. Note: Located in \%Program Files%\Sitecom Shared\PnP Universal Installer\
    DF5ServLDF5Serv.exeBy Faronics Corporation
    DFS Replication (DFSR)LDFSR.exePart of Windows Vista Note:Located in C:\%WINDIR%\System32
    dgtsys (dgtsys)Xdgtsys.sysAdded by Adware-DigitalNames
    DHCP Client (Dhcp)Ldhcpclient.exePart of Windows Vista Note:Located in C:\%WINDIR%\System32
    DHCP Client (Ulead Service)Xdhcpclient.exeAdded by the W32/Codbot-AG WORM!
    Diagnostic Facility COM Server (CdfSvc)LCdfSvc.exeRelated to Citrix MetaFrame Presentation Server
    Diagnostic Policy Service (DPS)Ldps.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Diagnostic Service Host (WdiServiceHost)Lwdi.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Diagnostic System Host (WdiSystemHost)Lwdi.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    DiamondCS Process Guard Service v3.000Ldcsuserprot.exeprocess guard
    DigiCtrlLdigisc.exeRelated to Matrox_Electronic_Systems DigiSuite Service Control
    DigiCtrl (eseonijpbeuoa)Xztk.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Digidesign MME Refresh Service (DigiRefresh)LMMERefresh.exeRelated to Digidesgin Protocols Refreshes your midi ports on the 002(R) (the 002R is a hardware audio/midi converter connected to your computer via firewire). Must be running in order to use the MIDI functionality of the Digi002R
    digiSPTIServiceLdigiSPTIService.exeRelated to Pro_Tools digital audio workstation (DAW) technology.
    Digital Pen rendezvous server (PenRendezvous)LLPhal.exeRelated to Logitech_o2 software from Logitech. Note: Located in \%Program Files%\Common Files\Logitech\Pen\Phal\Service\
    Digital Pen Socket to USB protocol (PenSup)LLPhal.exeRelated to Logitech_o2 software from Logitech. Note: Located in \%Program Files%\Logitech\Pen\Phal\Service\
    Digitizer Service (Digitizer)Ldigtizer.exeRelated to Digitizer_Service from Wacom Tech. Note: Located in C:\%WINDIR%\System32 (XP/WinNT/2K)
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    154ppm 0.085s (0.005s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer