CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    dx32hhecXdx32hhlp.exeAdded by the Nemog TROJAN!
    Dynamic Library Host (DLLHOSTS)Xdllhost.exeAdded by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: Note: This worm\trojan is located in C:\%WINDIR%\ More here
    DynamicHost (DLHOST)Xdlhost.exeAdded by the W32/Tilebot-BO WORM! Note: This worm file is found in the Windows or Winnt folder.
    DynDNS Updater ServiceLDynDNS.exeKana Solution DynDNS Updater is a lightweight application designed to keep hostnames in DynDNS' free and paid DNS services up-to-date with your current IP address.
    E-MU Audio Service (emaudsv)Lemaudsv.exeRelated to E-MU_Audio Service from E-MU Systems Sound Libraries. Note: Located in \%WINDIR%\System32\
    E6F7BD90XRandom_Name.exe Troj/BDoor-ADP
    E8CA85CCXE8CA85CC.EXE Troj/JD-A Read the link, steals information
    EarthLink Firewall Process Path Service
    (ElnkFWPPService)
    LEFWPPS~1.EXERelated to EarthLink_Firewall Process. Note: Located in C:\Program Files\EarthLink\Protection Control Center\
    EarthLink Monitor Service (EarthLinkMonitor)Lwmonitor.exeRelated to Total_Access from EarthLink and SIMPLIFY WI-FI from Boingo Note: Located in \%Program Files%\EarthLink TotalAccess\WENGINE\
    EarthLink Protection Control Center Service
    (ELNKService)
    LELNKServ.exeRelated to EarthLink_Protection_Control Center Service. Note: Located in C:\Program Files\EarthLink\Protection Control Center\
    EarthLinkSafeConnectAgentLSanaAgent.exePart of the EarthLink protection center
    Earthworks License Manager Lewlicense_manager_nt.exeSoftware application for mining and related extractive industries and produces two ranges of products under the Datamine and Earthworks labels. Note: Located in C:\Program Files\Common Files\Earthworks
    Earthworks License Services LLicenseServicesNT.exeSoftware application for mining and related extractive industries and produces two ranges of products under the Datamine and Earthworks labels. Located in C:\Program Files\Common Files\Earthworks
    Easy File & Folder Protector (ACDService)LEFPAP.exe Easy_File_&_Folder_Protector Deny access to certain files and folders, or to hide them securely from viewing and searching
    EasyBits Magic Desktop Services for Windows NT
    (ezntsvc)
    LezNTSvc.exeRelated to EasyBits_Magic_Desktop Services. Provides a safe way to share computers with children. Note: Located in \%WINDIR%\System32\
    EasyBoxApacheLApache.exeRelated to Apache web server Note: Located in \%Program Files%\EasyBox\Apache\
    eBoostr Service (EBOOSTRSVC)LEBstrSvc.exeRelated to eBoostr service from eBoostr.com. allows you to use an additional drive (flash memory or hard disk) as another layer of performance-boosting cache for your Windows XP®. Note: Located in \%Program Files%\eBoostr\
    EC2007 Service 1.40 (EC2007Service)Lec27ser.exe Electronic_Chart_Display_and_Information System (ECDIS). Data production for Electronic Navigational Charts. Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    ECA (cpanel)Xjavapanel.exeAdded by the W32/Tilebot-Y WORM! Note: This worm\trojan file is found in the Windows or Winnt folder. Read the link, rootkit type stealth involved.
    EClientLEclient.exeRelated to EClient Wi-Fi network from Ekahau Inc. Note: Located in \%Program Files%\Ekahau\Client\bin\
    eDataSecurity ServiceLeDSService.exeRelated to eDataSecurity from Acer. Note: Located in %ROOT%\Acer\Empowering Technology\eDataSecurity\
    EditScript Process Monitor (EditScriptProcMon)LEditScriptProcMon.exeRelated to EditScript from eScription, Inc. A transcription tools for Computer Aided Medical Transcription streamline workflow and speed document editing using a speech recognition engine. Note: Located in \%Program Files%\eScription\
    eDSService.exe (eDataSecurity Service)LeDSService.exeRelated to eDataSecurity from Acer. Note: Located in %ROOT%\Acer\Empowering Technology\eDataSecurity\
    eEye Application Bus (eeyeevnt)Leeyeevnt.exeRelated to eEye Digital Security
    eEye Retina Engine (RetinaEngine)LRetinaEngine.exeRelated to eEye Digital Security
    eID CRL ServiceLbeidservicecrl.exeRelated to Belgium_Identity_Card card reader. Note: Located in \%Program Files%\Belgium Identity Card\
    eID Privacy ServiceLbeidservicepcsc.exeRelated to Belgium_Identity_Card card reader. Note: Located in \%Program Files%\Belgium Identity Card\
    Electronic Arts Licensing (ufoeayeuoqn1)Xyyebgmvn.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Electronic Arts Licensing ServiceLEA Licensing Service.exeRelated to EA_Licensing_Service.exe is installed with some games from Electronic Arts. It is required for the games to run. Leave it alone if you want to play any games from EA Note: located in C:\Program Files\Common Files\Electronic Arts Shared\
    Electronic Arts Licensing Service (yqaavwiiiza6)Xwjedvpzzpm.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    ELNK Update Service (ELNKUpdateService)LUpdateService.exeRelated to EarthLink's protection centre
    eLock Service (eLockService)LeLockServ.exeRelated to eLock service from Acer Empowering Technology. Note: Located in C:\Acer\Empowering Technology\eLock\Service\
    EloSystemServiceLEloSrvce.exeElo TouchSystems, Inc. - http://www.elotouch.com
    EloTouchscreenLEloTouch.exeRelated to Elo TourchSystems, Inc.
    elpow_spyXelpow_spy.sysAdded by the ElpowKeylogger Spyware! Note: This file is found in the System32\drivers folder. Read the link, rootkit type stealth involved.
    Emagic EMI System Tray Service (emitray) Lemitray.exeThe tray icon of the emagic EMI 2/6 USB audio interface
    EMCliSrvLEMCliSrv.exeRelated to Express_Metrix PC inventory and software usage tracking. Note: Located in C:\WINDOWS\system32\wex4962\
    Empty (m_hook)Xm_hook.sys Troj/BagleDl-CJ Note: Located in %windir%\system32 Read the link, rootkit stealth involved
    Enables Java Support (Java)Xwinjava.exeAdded by the W32/Codbot-AA WORM! Note: This worm/trojan file is found in the System32 folder. (May use various filenames and will startup with system even in Safe mode.)
    Enables Javascript Support (Javascript)Xjavascript.exeAdded by the W32/Codbot-V WORM!
    EnConcertRMSLenconcertrms.exeRelated to Xcelera_Echo_Lab_Management Medical services from Philips.
    Encrypt Local ServicesXsvshost.exeAdded by a variant of the SdBot.awe family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\
    Encryption ServiceLencsvc.exeRelated to Citrix MetaFrame
    end task (Taskend)XTaskend.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\
    end task (Taskend)XRayfell.exeAdded by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    ENDFORCE Agent APILAgentAPI.exeRelated to ENDFORCE from ENDFORCE, Inc. Centraly define endpoint security policies. Note: Located in \%Program Files%\ENDFORCE\
    Energy Star™ EZ GPO Power Management Configuration Tool
    (EPA_GPO_PMService)
    LPMService.exeRelated to EZ_GPO_Power_Management from Terra Novum, LLC Note: Located in \%WINDIR%\System32\
    eNet ServiceLeNet Service.exeRelated to Empowering_Technology from Acer. Note: Located in \%ROOT%\Acer\Empowering Technology\eNet\
    EnGenius Network Analysis ToolXwinegne.exe W32/Rbot-GRC Read the link, steals information
    Entrust Entelligence Logging Service (eelogsvc)Leelogsvc.exeRelated to Entrust_Entelligence Logging Service from Entrust. Note: Located in C:\WINDOWS\System32\

    Engine Version 2.0 by CastleCops

    spacer spacer