CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.

This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    iPod-tjeneste (iPod Service)LiPodService.exeRelated to Apple iPod.
    iPodServiceLiPodService.exeRelated to Apple iPod.
    iPodSrvLiPodSrv.exeRelated to iPod Apple software. Note: located in C:\Program Files\iPod\bin\ in Windows 2000/XP/2003.
    IPODT1000 (ssipod1)ssipod1.sys Troj/Goldun-FI
    IPRIPXipripst.dllDetected as W32/Mofei-V Located in \ipripst.dll
    IPRIP (IPRIP)Xsvchost.exe -k netsvcsAdded by the Backdoor.Ripgof TROJAN! Read the link, rootkit type stealth involved.
    IPS Core Service (IPSSVC)LIPSSVC.EXEA VPN client service found in Lenovo Thinkpad. Note: located in C:\WINDOWS\system32\
    IPS-Basisservice (IPSSVC)LIPSSVC.EXEA VPN client service found in Lenovo Thinkpad. Note: located in C:\WINDOWS\system32\
    IPSEC Services (PolicyAgent)Llsass.exeRelated to Active_Directory-based_IPSec_policies For Windows 2000 and 2003. Note: Located in \%WINDIR%\system32\
    Ipswitch WS_FTP Queue (ftpqueue)Lftpsched.exeRelated to Part of WS_FTP Pro from Ipswitch. Note: Located in C:\Program Files\WS_FTP Pro\
    Ipswitch WS_FTP Service (iFtpSvc)LiFtpSvc.exeRelated to Ipswitch_WS_FTP The main exe file of WS-FTP server. Note: Located in C:\iFtpSvc\
    IPtableXipconfig32.exeAdded by the W32/Tilebot-AP WORM! Note: This worm file is found in the Windows or Winnt folder.
    IPv6 Helper DriverXcsass.exeAdded by the AGOBOT.TC WORM!
    IPX/SPX (NWLink)Xusbmini.sys Troj/Proxy-CY Note: Located in %windir%\system32\drivers Read the link, allows remote access
    IrBridge User-Level Interface (USRBRIDG)Lusrbridg.exeRelated to the Extended Systems infrared port, made by Extended_Systems Inc. This file should be located in the Windows\System32\ or Winnt\System32 folder.
    IS Service (ISSVC)LISSVC.exeRelated to Symantec's Firewall \%Program Files%\Symantec Client Security\Symantec Client Firewall\
    ISAM SMT Service (ISAMsmt)Lisamsmt.exeRelated to IBM Global Services - http://www.anti-spy.info/process/isamsmt.exe.html
    ISC BIND (named)Lnamed.exeRelated to ISC_BIND BIND (Berkeley Internet Name Domain) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. Note: Located in \%WINDIR%\System32\dns\bin\
    iSeries Access for Windows Remote Command (Cwbrxd)LCWBRXD.EXERelated to IBM Corporation.
    ISEXEngXangelex.exeBargain Buddy variant
    ISP Ampi ServiceXisampi.exeAdded by the W32/Tilebot-JJ WORM! Note: This worm is located in C:\%WINDIR%\ Read the link, allows remote access
    ISP Monitor (ISPMonitorSrv)LISPMonitorSrv.exeRelated to ISP_Monitor from How2 Studios. Monitor your connection, run speed tests and much more. Note: Located in \%Program Files%\ISP Monitor\
    ISS Buffer Overflow Exploit Prevention (VPatch)Lvpatch.exeRelated to IBM_ISS (Internet Security Systems) Note: Located in \%Program Files%\BlackIce\
    ISSI EZUpdate (ISSIMon)Lissimsvc.exeRelated to Ibm_Global_Services Used internally by IBM for automatic updating of software and microsoft patching Note: Located in c:\sdwork\
    ISSvc (ISSVC)LISSVC.exeRelated to Norton Internet Security
    Italian Grand PrixXgrand.exeAdded by the W32/Spybot-MK WORM! Note: C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K)
    ITE Remote Controler service (ITECIRService) LRemoteControlService.exeRelated to ITE_Remote_Control Service from ITE Tech. Inc.
    iTechnology iGateway 4.2 (iGateway)Ligateway.exeRelated to iTechnology_Application Server from Computer Associates International, Inc. Note: Located in \%Program Files%\CA\SharedComponents\iTechnology\
    iTunes Music Service (iTunesMusic)XiTunesMusic.exeAdded by W32.Spybot.NLX WORM! Rootkit Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    IviRegMgrLiviRegMgr.exeRelated to RegMgr Module from InterVideo. Note: Located in \%Program Files%\InterVideo\RegMgr\
    IWin serviceXiwinapp.exeAdded by a variant of the Trojan/Backdoor TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Ixia Endpoint (IxiaEndpoint)Lendpoint.exeAdded by Ixia_Endpoint Note: Located in C:\PROGRA~1\NetIQ\Endpoint\
    JaguarLjagsrv.exeRelated to Sybase_EAServer Note: Located in C:\Sybase\EAServer\bin\
    Java development ServicesXlogins32.exeAdded by the W32/Tilebot-HC WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. Steal information from Protected Storage
    Java development ServicesXwindows.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    Java ineticeXrealetin.exeAdded by the Troj/Bckdr-PQM TROJAN! Note: This worm\trojan is located in C:\Program Files\Common Files\Microsoft Shared\MSINFO\
    Java Sun Scheduler (JUSCHED)Xjusched.exeAdded by the W32/Sdbot-CQC WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. More here
    JavaPlatform64XJavaPlatformAdded by the W32/Kassbot-M WORM! Note: Located in C:\%WINDIR%\
    JFWServiceLjfw.exeRelated to JAWS a powerful accessibility solution that reads information on your screen using synthesized speech. Note: Located in \%Program Files%\freedom scientific\jaws\8.0\
    JiurlPortHide (JiurlPortHide)XJiurlPortHide.sysAdded by the Troj/Progent-A TROJAN!
    jjtAutoLaunchLjjtAutoLaunch.exeRelated to Sound_Devices From Sound Devices, LLC. Note: Located in \%Program Files%\Sound Devices\USBPre\Services\
    jsdaemonLjsdaemon.exeRelated to fax service from JetFax Inc.
    Juniper Network Connect Service (dsNcService)LdsNcService.exeRelated to Juniper Networks Inc. Networking Platform.
    K4NVXk4nv.exeAdded by a variant of the Trojan.K4NV.Process WORM! Note: located in C:\WINDOWS\k4nv.exe
    K9 Time SynchronizationLk9nt.exeRelated to HC Mingham-Smith Limited http://www.kaska.demon.co.uk/history.htm
    Kaseya AgentLAgentMon.exeRelated to Kaseya Inc.
    Kaspersky Anti-Virus (AVP)Lavp.exeRelated to Kaspersky_Anti-Virus Note: Located in \%Program Files%\Kaspersky Lab\Kaspersky Anti-Virus 8.0\
    Kaspersky Anti-Virus 6.0 (AVP)Lavp.exeRelated to Kaspersky_Anti-Virus Note: Located in C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\
    Kaspersky Anti-Virus 7.0 (AVP)Lavp.exeRelated to Kaspersky_Anti-Virus Note: Located in \%Program Files%\Kaspersky Lab\Kaspersky Anti-Virus 7.0
    Kaspersky Anti-Virus Service (kavsvc)Lkavsvc.exeRelated to Kaspersky virus removal program. Note: Located in \%Program Files%\Kaspersky Lab\Kaspersky Anti-Virus 5.0 for Windows Workstations\
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    163ppm 0.250s (0.008s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer