CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    M-Audio Producer USB Installer (MAudioProducerService)LMAUSBProducerInst.exeRelated to M-Audio_Producer_USB Installer from Avid Technology, Inc. Note: Located in \%Program Files%\M-Audio\Producer USB\
    M-BUS/M-NET Administration (MCONTROL)Lmcontrol.exeRelated to Siemens Energy & Automation Platform. Note: located in C:\Program Files\ProcessSuite\MBUSDRVR\
    M1 Licensing Helper (iLicenseSvc)LiLicenseSvc.exeRelated to Related to GE_Fanuc_Automation enable you to act in real-time to optimize productivity and increase profitability. Note: located in C:\WINDOWS\Intellution\
    M1crosoft AgantXqhotsew.exeAdded by a variant of the Backdoor.Sdbot Note: Located in \%WINDIR%\System32\dllcache\
    mac128Xmac128.sysAdded by the Troj/Klutz-A Trojan!
    MacFormatServiceLFORMATM.EXERelated to Conversions Plus from DataViz
    Machine Debug Manager (Machine_Dbg-Mgr)Xmdm.exeAdded by a variant of the SdBot.aad family of worms and IRC backdoor Trojans. Note: This trojan is located in C:\WINDOWS\AppPatch\
    Machine Debug Manager (MCH_Debug)Xmdm.exeDetected as Backdoor.Win32.SdBot.aad by Kapersky Note: Located in C:\WINDOWS\Resources
    Machine Debug Manager (MDM)Lmdm.exeVisual studio debuger, if you install vs2003, mdm.exe is found in c:/program files/common files/microsoft shared/vs7debug For more info Click_Here
    Macro Scheduler Service (mschedsvc)Lmsschedsvc.exeRelated to Macro_Scheduler from MJT Net Ltd. Save time and increase productivity by automating frequent tasks.
    Macromedia Licensing ServiceLMacromedia Licensing.exeRelated to Macromedia products: Flash, Dreamweaver, etc.
    Macromedia Updater (mmupdate)X19D.tmp".exeAdded by a variant of the Win32.Small.oa TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\TEMP\ The filename is randum in the format xxxx.tmp".exe
    Madentec Discover MonitorLMadResServ.exeRelated to Madentec_Discover Monitor from Madentec Limited. Note: Located in \%Program Files%\Madentec Limited\Discover\Services\
    Madentec USBLMadWinServ.exeRelated to Madentec_USB discover service. Note: Located in \%Program Files%\Madentec Limited\Discover\Services\
    MagicTuneEngineLMagicTuneEngine.exeRelated to MagicTune_Engine from Samsung. Magic Tune Premium is an update of MagicTune 3.6 for Samsung monitors. Note: Located in C:\Program Files\MagicTune Premium\
    Mailgate Mail/Proxy ServiceLmgatesvc.exeMailgate Internet Connectivity Server
    MailList ControllerLamlcSVC.exeRelated to MailList Controller from arclab.com Note: Located in \%Program Files%\Arclab\MailList Controller\
    Manageer Network ConnectionsXtelcmd.exeBAD - Look how manager is spelled.
    Manageer Network Connections (Kern32)Xtelcmd.exeA new service added by the Troj/Agent-CP TROJAN, with a display name of Manageer Network Connections.
    Management Consultants (CLMCs)Xclmcs.exeAdded by a variant of the Backdoor.Sdbot Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    Management System (XSML)Xsxml.exeAdded by a variant of the IRCBOT Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    Manager (Windows XP Manager)Xmsnmgr.exeAdded by the W32/Kassbot-L Read the link, rootkit type stealth involved.
    Managing FAT and NTFS partitions (Defragmentation
    Manage)
    Xdfrgfat16.exeAdded by the W32/Codbot-N WORM!
    Mangomind Drive Repair (MindRepair)Ldirtcon.exeRelated to Mangomind access your business critical files from anywhere, at any time, from any computer. Note: Located in C:\Program Files\Mango\Mind\Utilities\
    MarkVision Server (MvServer)Llexmvservice.exeRelated to MarkVison_Server From Lexmar. Note: Located in C:\WINDOWS\SYSTEM32\
    MarkVision Web Server (MvWebServer)Llexwebservice.exeRelated to MarkVison_Server From Lexmar. Note: Located in C:\WINDOWS\SYSTEM32\
    Marvell RAID Event Agent (Marvell RAID)Lmvraidsvc.exeRelated to Marvell_RAID Event Agent. Note: Located in \%Program Files%\Marvell\61xx\svc\
    Mass Effect(TM) Xbox 360Xmfxbox.exe W32/Spybot-MS Read the link, allows remote access
    Mass Effect™ Xbox 360Xmfxbox.exeAdded by the W32/Spybot-MS WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K) disabling the automatic startup of other software
    MATLAB Server (matlabserver)Lmatlabserver.exeRelated to The MathWorks Inc.
    MaxBackServiceIntLMaxBackServiceInt.exeRelated to Maxtor_backup service. Note: Located in C:\Program\Maxtor\Maxtor Backup\
    MaxSyncService (NTService1)LSyncServices.exeRelated to Maxtor_OneTouch service. Note: Located in C:\Program\Maxtor\OneTouch\Utils\
    Maxtor Performance Analysis ToolXwinrcn.exe Troj/IRCBot-VY Read the link, allows remote access
    Maya 6 PLE Documentation ServerLwrapper.exeRelated to Alias Systems Corp.
    Maya 7.0 Documentation Server (maya70docserver)Lwrapper.exeRelated to Maya
    MBackMonitorLMBackMonitor.exeMcafee related
    MBAMServiceLmbamservice.exe Malwarebytes'_Anti-Malware
    MC/Empower i.collect Service (iCollectService)Licserv.exean internet cleaning utility issued by various ISP's for their customers use
    McAfee AgentLmyAgtSvc.exeRelated to Network Associates, Inc.
    McAfee Alert Manager (AlertManager)Lamgrsrvc.exeRelated to McAfee_Alert_Manager , http://www.mcafee.com/ deals with alert management. Note: Located in C:\Program Files\Network Associates\Alert Manager\
    McAfee AntiSpyware Real-Time Scanner
    (McAfeeAntiSpyware)
    LMsssrv.exeRelated to Network Associates, Inc.
    McAfee AntiSpyware ServiceLmassrv.exeRelated to McAfee AntiSpyware service.
    McAfee Application Installer Cleanup?012703~1.EXE Appears to be related to a mcafee uninstaller, if it is still present after a reboot, it should be removed
    McAfee Desktop Firewall Service (FireSvc)LFireSvc.exeRelated to McAfee Desktop Firewall Service. Note: located in C:\Program Files\Network Associates\McAfee Desktop Firewall for Windows XP\
    McAfee E-mail Proxy (Emproxy)Lemproxy.exeRelated to McAfee_Email_Proxy c:\program files\common files\mcafee\EmProxy\
    McAfee FirewallLCPD.EXERelated to Network Associates
    McAfee Framework Service (McAfeeFramework)LFrameworkService.exeMcAfee/CA related
    McAfee HackerWatch ServiceLHWAPI.exeRelated to McAfee_HackerWach Service installed by the McAfee Internet Security suite and whose role is to update the HackerWatch.org website with any suspected hacker attack which you decide to report to the HackerWatch service run by McAfee. Down to end-user preference. Note, however, that this service, introduced in mid-2006, has a tendency to gobble up memory on some PCs, from 30Mb to 50Mb. Read the recommandations. Note: Located in C:\Program Files\Common Files\McAfee\HackerWatch\
    McAfee Internet security suiteXAvsynmgr.exe W32/Tilebot-KC Note: Located in C:\Windows Turns off anti-virus applications, Allows others to access the computer. Read the link
    McAfee Log Manager (McLogManagerService)Lmclogsrv.exeRelated to McAfee_SecurityCenter Log Manager. Note: Located in C:\Program Files\McAfee\MSC\

    Engine Version 2.0 by CastleCops

    spacer spacer