CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Dimension4LD4.exeRelated to Dimension4 Thinking Man Software - Note: Located in C:\Program Files\D4\
    direct sound rss (dsrss)Xdsrss.exeAdded by the Backdoor.SdBot.xd as identified by ewido. Note: This worm\trojan is located in C:\%WINDIR%\
    DirectUpdate engineLDUService.exeDirect Update - registers dynamic IPs to a fixed hostname
    DirectX Debug Service (DXDebug)LDXDebugService.exeRelated to the Microsoft DirectX SDK and offers a debug facility for this development suite.
    DirectX DriversXD1rectX.exeAdded by the SDBOT.CIF WORM! This should not be confused with Microsoft DirectX files. Read the link, rootkit type stealth involved.
    DirectX Graphics (dxdmain)Xdxdmain.exeAdded by the W32/Codbot-O WORM!
    DirectX multi versionXdxcombin.exe Trojan/Backdoor - also detected by Prevx
    DirectX Service (Cakad)Xexplorer.exe Troj/DwnLdr-GTD Read the link, allows remote access
    DirectX Service (DirectFezt)Xexplorer.exe Troj/Crybot-G Note: Located in the downloaded program files folder Read the link, allows remote access
    DirectX Service (DirectService)Xdirectx.exeAdded by the Troj/Crybot-B TROJAN! This should not be confused with Microsoft DirectX files. Note: Allows a remote intruder to gain access and control over the computer through IRC channels.
    DirectX Service (DirectValk)Xexplorer.exeAdded by the Troj/Crybot-F TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    DirectX Service (DirectXopm)Xexplorer.exeAdded by an unknown variant of a backdoor TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\COMMAND\ Folder. Note This should not be confused with C:\%WINDIR%\explorer.exe which is the Microsoft Operating file.
    directx.exeXdirectx.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder. Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.) This worm\trojan file is found in the Windows or Winnt folder.
    DIRECWAY Webcast (DPC_SRV_WEBCAST)Ldpcproxy.exeRelated to DIRECWAY Webcast - http://www.directway.com/
    DirMS_DefragmentationLDirmsService.exeRelated to DirMS_Defragmentation from DIRMS. Allows the user to defragment hard drives with a user-friendly GUI. Note: Located in C:\Program Files\MATCO\
    DiRT Drivers Auto Removal (pr2ah4nb) (pr2ah4nb)Lpr2ah4nb.exeRelated to DiRT_Drivers Auto Removal from Protection Technology. Ultimate solution for licensed software developers and publishers. Note: Located in \%WINDIR%\System32\
    DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc)Lpr2ah4nc.exeRelated to DiRT_Drivers Auto Removal from Protection Technology. Ultimate solution for licensed software developers and publishers. Note: Located in \%WINDIR%\System32\
    Disk Checker Service (Check Disk)Xchkdsk.exeAdded by the W32/Tilebot-IS WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. Read the link
    Disk Indexing Service (DiSVC)Xdisvc.exeAdded by the Troj/IRCBot-UX TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Disk Management Service (VxSvc)LVxSvc.exeRelated to Dell Open Management system. http://www.what-process.com/process-info.aspx?p=VxSvc.exe
    Disk Monitor Services (DiskMon32)Xsvchost.exe -k dmonAdded by the Hanmon TROJAN! Note: This trojan file is found in the System32 folder.
    Disk Volume Shadow Copy (dvssf)Xdvssvc.exeAdded by a variant of the Backdoor.Win32.SdBot.aad family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    DiskeeperLDkService.exeExecutive Software's Diskeeper (Defragmenter)
    Diskeeper DPAN Service (DPANService)LDPANSvc.exeRelated to Diskeeper Disk defragmental tool, and much more. Note: Located in \%Program Files%\Diskeeper Corporation\Disk Performance Analyzer for Networks\
    DisplayLink Service (DisplayLinkService)LDisplayLinkService.exeRelated to DisplayLink Service from DisplayLink. Network display technology that creates simple connections between computers and multiple monitors via USB. Note: Located in \%Program Files%\DisplayLink Core Software\
    Distributed Allocated Memory UnitXmravsc32.exe W32/Rbot-GUA Note:Located in C:\Windows\System\dllcache (Win9x/Me), C:\%WINDIR%\System32\dllcache (XP/WinNT/2K) Please read link. Allows remote access. Turns off AV.
    Distributed Link TrackingXntlsrv.exeAdded by a variant of the W32/SDBOT WORM! Note: Located in \%WINDIR%\
    Distributed Link Tracking Client (TrkWks)Lsvchost.exe -k LocalSystemNetworkRestrictedPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Distributed Link Tracking ExtensionsXkernel32dll.exeAdded by the W32/Myfip-I worm.
    Distributed Link Tracking Service (TrkWksvc)XTrkWksvc.exeAdded by the W32.Toxbot.B WORM!
    Distributed Transaction Coordinator (MSDTC)Lmsdtc.exeRelated to the Distributed_Transaction_Coordinator on Windows 2003. Note: Located in C:\%WINDIR%\System32\
    Distributed Transaction Coordinator (TrkWks)Ltrkwks.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Distributed Transaction Server (MSDCT)Xmsdtc.exe Troj/Hupigo-SJ Read the link, allows remote access
    distributed.net clientXiosdt.exeYou have a Trojan virus on your PC . IOSDT.EXE is its main file. You most probably tried to download illegal copies of Microsoft software, and got infected by this trojan virus as a result (it gives access to your PC from the Internet).
    distributed.net client (dnetc)Ldnetc.exeClient part of the dstributed.net general-purpose distributed computing project.
    DivX video codec libraryXDivXsm.exe W32/Sdbot-DHC Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (Vista/XP/WinNT/2K)
    DK2 Network Server (DNServer32)LDNSrv32.exeRelated to DESkey_Hardware reliable and flexible means to protect your software from piracy. Note: Located in C:\Program Files\DESkey\DK2 Network Server\
    dkab_deviceLDKabcoms.exeRelated to dkab_device Support "bidirectional" printer applet on the Control Panel. Note: Located in \%WINDIR%\System32\
    DkeySyncLsyncservice.exeRelated to GE_Security_Supra Note: Located in c:\program files\ge security supra\
    dlbc_deviceLdlbccoms.exeRelated to Dell computers
    dlbt_deviceLdlbtcoms.exeSomething by Dell Computers
    dlbu_deviceLdlbucoms.exeRelated to Dell computers
    dlbx_deviceLdlbxcoms.exeRelated to Dell computers.
    dlcc_deviceLdlcccoms.exeDell printer related. File is found in the System32 folder.
    dlcd_deviceLdlcdcoms.exeRelated to Lexmar Lexmark International, Inc. Printers Note: Located in C:\WINDOWS\System32\
    dlcf_deviceLdlcfcoms.exeRelated to Dell computers. Note: Located in \%WINDIR%\System32\
    dlcg_deviceLdlcgcoms.exeRelated to Dell_Printer Communication System Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    dlci_deviceLdlcicoms.exeRelated to dell printers
    dlcj_deviceLdlcjcoms.exeRelated to Dell Photo AIO Printer, may be the driver.
    dlcq_deviceLdlcqcoms.exeRelated to Related to dell printers

    Engine Version 2.0 by CastleCops

    spacer spacer