CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    HP Port ResolverLhpbpro.exeRelated to Hewlett-Packard Company
    HP ProLiant Remote Monitor Service (CpqRcmc)LCpqRcmc.exeRelated to HP_ProLiant_Remote_Monitor_Service Note: This file is located in C:\%WINDIR%\
    HP ProLiant System Shutdown Service (sysdown)Lsysdown.exeRelated to HP products
    HP ProtectTools Device Locking / Auditing (FLCDLOCK)Lflcdlock.exeRelated to ProtectTools from Hewlett-Packard Development Co. Locking Device. Note: Located in \%WINDIR%\System32\
    HP RF Device Service (HpRfDev)LHpRfDev.exesupport for HP managing wireless devices
    hp service (Hpsys)Xhpsys.exeAdded by the W32/Codbot-AF WORM! Note: This service has nothing to do with HP. This worm\trojan file is found in the System32 folder.
    HP StatusLhpb2ksrv.exeRelated to Hewlett-Packard Company
    HP Status PrintLhpbhksrv.exeRelated to Hewlett-Packard company.
    HP Status ServerLhpboid.exeRelated to Hewlett-Packard Company
    HP System Management Homepage (SysMgmtHp)Lsmhstart.exeRelated to HP products
    HP Version Control Agent (cpqvcagent)Lvcagent.exeRelated to HP products
    HP Web JetadminLhpwebjetd.exeRelated to HP WebJetAdmin software, used to configure and monitor network print servers.
    HP WMI Interface (hpqwmi)LHPQWMI.exeRelated to Hewlett-Packard
    hpdj?hpdj.exeMaybe HP related? Sits in TEMP folder.
    hpdjLhpztsb04.exeHewlett Packard printer toolbox, sits in taskbar. Path to executable file - %windir%\system32\spool\drivers\w32x86\3\
    hpdriverXhpdriver.sysAdded by the Troj/Rootkit-AA TROJAN! Note: This trojan file is found in the System32 folder. Read the link, rootkit type stealth involved.
    HpPrinterXhpserver.exeAdded by the Troj/CmjSpy-W Trojan!
    hpqwmiexLhpqwmiex.exeRelated to HP_ProtectTools security manager
    HPR34K8Xhpr34k8.sysAdded by the Troj/Rootkit-AA TROJAN! Read the link, rootkit type stealth involved.
    HPWirelessMgrLHPWirelessMgr.exeLocated in HP Notebook Utilities - guessing for wireless connection.
    HTTP SSL (HTTPFilter)Llsass.exeRelated to Application_Isolation_Mode_Functions Microsoft IIS 6.0. Note: Located in C:\%WINDIR%\System32\
    huapeak?huapeak.exeUnknown origin.
    Human Interface Device Access (hidserv)Lsvchost.exe -k LocalSystemNetworkRestrictedPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Hummingbird Inetd (HCLInetd)Linetd32.exeRelated to Hummingbird Ltd. - http://www.hummingbird.com/
    Hummingbird Jconfig Daemon (Jconfigd)Ljconfigdnt.exeRelated to Hummingbird Ltd. - http://www.hummingbird.com/
    HXD Service 100 (HackerDefender100)Xnewka.exeVirus http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=39265
    H_Server (H_Server)XG_Server.exeAdded by the Troj/GrayBird-W TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
    I-O DATA Device Management Service (IoDevMgrService)LIoDevMgrService.exeRelated to I-O_DATA_Device_Management service from I-O DATA DEVICE, INC. Note: Located in \%Program Files%\I-O DATA\IoDevMgrService\
    i386pXI386P.SYSAdded by the Backdoor.Rustock TROJAN! Found in the System32\drivers folder. Read the link, rootkit type stealth involved.
    IAA Event Monitor (IAANTMon)Liaantmon.exeIntel related
    IapLIap.exeRelated to Dell OpenManage Client Instrumentation.
    IBM Active PCI Alert Service (IBMHPS)LIBMHPASV.EXERelated to IBM_Active_PCI Alert Service from IBM Corp. Note: Located in \%WINDIR%\System32\
    IBM Automatic Server Restart Executable (ibmasrex)Libmasrex.exeUnknown owner :Location C:\WINDOWS\system32\ibmasrex.exe Related to IBM servers.
    IBM Automatic Server Restart Service for IPMI
    (ibms6asr)
    LIBMIASRW.EXERelated to IBM_Automatic_Server_Restart from IBM. Note: Located in \%WINDIR%\System32\
    IBM CICS Transaction Gateway
    (IBMCICSTransactionGateway)
    LCTGSERVICE.EXERelated to IBM Corp.
    IBM CICS Universal Client (CICSClient)Lcclserv.exeRelated to IBM Corp.
    IBM Enterprise Extender (ldlcserv)Lldlcserv.exeRelated to IBM Corp. - http://www.anti-spy.info/process/ldlcserv.exe.html
    IBM HDD APS Logging Service (TPHDEXLGSVC)LTPHDEXLG.EXERelated to IBM's Active_Protection_System Made by the IBM_Corporation The file associated with this service is located in the System32 folder.
    IBM KCU Service (TpKmpSVC)LTpKmpSVC.exerelated to IBM ThinkPad
    IBM Mobility Client DHCP Control (artdhcp)Lartdhcp.exeRelated to IBM_Mobility_Client DHCP Control Note: Located in C:\Program Files\IBM\Mobility Client\
    IBM MQSeriesLamqsvc.exeIBM WebSphere® MQ to exchange information across different platforms
    IBM PM Service (IBMPMSVC)Libmpmsvc.exePower management driver for IBM laptops
    IBM PSA Access Driver Control (PsaSrv)LPsaSrv.exerelated to Professional Services Automation (PSA) from SharpOWL
    IBM Rapid Restore Ultra ServiceLrrpcsb.exerelated to Xpoint Technologies
    IBM Trace Facility (TrcBoot)Ltrcboot.exeRelated to IBM Corp.
    IBM User Verification ManagerLuvmserv.exeRelated to IBM_User_Verification_Manager (UVM) secure logon interface. Note: located in C:\Program Files\IBM\Security\
    IBM WebSphere Application Server V5 - server1
    (IBMWAS5Service - server1)
    Lwasservice.exeRelated to IBM WebSpere server.
    IBWin ServiceLIBWin Service.exeRelated to IBackUp_for_Windows Backup on character sets other than US/English. Note: Located in C:\Program Files\IBackup For Windows\
    ICFXsvchost.exe:exe.exeAdded by the Trojan.DoS.Win32.Opdos TROJAN! DO NOT DELETE THE FILE \%WINDIR%\System32\svchost.exe
    iClarityQoSServiceLQosServM.exeRelated to Avaya_IP Softphone. Note: Located in C:\WINDOWS\system32\

    Engine Version 2.0 by CastleCops

    spacer spacer