CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.

This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    AOL Anti-Spyware Service (AOLSpyWareRem)Xaolspy.exeAdded by a variant of the Backdoor.Win32.Rbot.cgu TROJAN! Note: This worm\trojan is located in C:\WINDOWS\Debug\
    AOL Antivirus Update Service (aolavupd)Laolavupd.exeRelated to AOL Antivirus Update Service.
    AOL Configuration Utility (AOL_CONF)Xaolconf.exeAdded by a variant of the Backdoor.Win32.SdBot.aad family of worms and IRC backdoor Trojans. Note: located in \%WINDIR%\Media\
    AOL Connectivity Service (AOL ACS)LAOLAcsd.exeOwner: America Online. Description: AOL Connectivity Service - starts an automatic function that restores the connection should you lose it while online. Also shown as AOL Connectivity Service (AOL ACS).
    AOL Connectivity Service (AOL ACS)Lacsd.exeAOL related
    AOL Debug Service (SVC_Debug)Xaoldebugs.exeAdded by a variant of the Backdoor.Win32.Rbot.cgu TROJAN! Note: This worm\trojan is located in C:\WINDOWS\Cursors\
    AOL Hosting Service (AOL_Hosting)Xaolhost.exeAdded by a variant of the SdBot.aad family of worms and IRC backdoor Trojans. Note: This trojan is located in C:\WINDOWS\AppPatch\
    AOL Smart Update Service (AOL-Updatr)Xaolupd.exeVariant of Rbot.cgu
    aol software (Aol Software)Xsmss.exeAdded by the W32/Tilebot-FM WORM! Note: This is not the legitimate Windows process (Which is always found in the System32 folder). This worm file is found in the Windows or Winnt folder. Allows a remote intruder to gain access and control over the computer, read the link.
    AOL Spy Watch (AOL-SPY_Watch)Xaolsw.exeAdded by a variant of the Backdoor.Win32.SdBot.aad family of worms and IRC backdoor Trojans. Note: located in \%WINDIR%\Media\
    AOL Spyware Protection Service (AOLService)Laolserv.exeRelated to AOL
    AOL Spyware Removal Agent (AOL-Spy_Ware)Xaolspysw.exeAdded by a variant of the SdBot.aad family of worms and IRC backdoor Trojans. Note: This trojan is located in C:\WINDOWS\Web\
    AOL TopSpeed Monitor (AOL TopSpeedMonitor)Laoltsmon.exeAOL Topspeed
    ApacheLApache.exeApache Web Server Software
    Apache Tomcat (Tomcat6)Ltomcat6.exeRelated to Apache_tomcat
    Apache Tomcat SQSService (SQSService)Ltomcat5.exeRelated to Apache_Tomcat Note: Located in \%ROOT%\USER\Programs\tomcat\bin\
    Apache2LApache.exeApache Web Server
    Apache2Triad Apache2 Service (Apache2)Lhttpd.exeRelated to Apache2Triad Software. An Open source database. Note: Located in \%ROOT%\apache2triad\\bin\
    Apache2Triad Apache2 Service with SSL (Apache2SSL)Lhttpd.exeRelated to Apache2Triad Software. An Open source database. Note: Located in \%ROOT%\apache2triad\bin\
    Apache2Triad MySql Service (MySql)Lmysqld.exeRelated to Apache2Triad Software. An Open source database. Note: Located in \%ROOT%\apache2triad\mysql\bin\
    Apache2Triad PostgreSQL Service (PgSql)Lpg_ctl.exeRelated to Apache2Triad Software. An Open source database. Note: Located in \%ROOT%\apache2triad\pgsql\bin\
    Apache2Triad SlimFTPd Server (SlimFTPd)LSlimFTPd.exeRelated to Apache2Triad Software. An Open source database. Note: Located in \%ROOT%\apache2triad\ftp\
    Apache2Triad Xmail Service (XMail)LXMail.exeRelated to Apache2Triad Software. An Open source database. Note: Located in \%ROOT%\apache2triad\mail\bin\
    APACS+ NIM32 (NIM32)LNim32.exeRelated to Siemens Energy & Automation Platform. Note: located in C:\Program Files\ProcessSuite\NIM\
    APC PBE ServerLpbeserver.exeAPC PowerChute Business Edition Server (For UPS)
    APC UPS ServiceLmainserv.exeRelated to American Power Conversion Corporation
    AppExpress ClientLece.exeRelated to Endeavros Technology, Inc and Microsoft_Encarta
    Apple Mobile DeviceLAppleMobileDeviceService.exeAdded by iTunes 7.3 to interface with Apple mobile devices. Allows iTunes to interact with iPhone when connected to the computer.
    AppleTalk Messenger (ATMsg)LATMsg.exeRelated to AppleTalk_Messenger Now owned by Pure Networks, Inc. PC MACLAN will permit the transfer of data from PC to Mac. Note: Located in \%Program Files%\Miramar\PC MACLAN\
    Application Experience (AeLookupSvc)Laelupsvc.dll Part of Windows Vista Note:Located in C:\%WINDIR%\System32
    Application Information (AeLookupSvc)Lappinfo.dll Part of Windows Vista Note:Located in C:\%WINDIR%\System32
    Application Layer Gateway (Application Gateway Service)XWeRecl.exeAdded by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: This worm\trojan is located in C:\%WINDIR%\ folder. More here
    Application Layer Gateway Manager (AppLayerGatewayMgr)Xalg.exeAdded by W32/Tilebot-EU WORM!, Note: not to be confused with see_Here located in C:\Windows\System32\ this infection is locate in C:\Windows\
    Application Layer Gateway Service (ALG)Lalg.exeProvides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Internet Connection Firewall Note:Located in C:\%WINDIR%\System32 (Vista /XP/WinNT/2K)
    Application Layer Gateway ServicesXalg.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\
    Application Layer Gateway System (ALGS)Xalgsys.exeAdded by the W32/Rbot-DDF WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Application Layer ServiceXweRecv.exeAdded by the SystemPoser TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    Application Layer Service (algserv)Xalgserv.exe Troj/Agent-ECW Note: Located in %windir%\system32
    Application Layer Service Control (applilserv)Xapplayer.ex W32/Rbot-GHL Note: Located in %windir%\system32 Read the link, allows remote access
    Application Management (AppMgmt)Lappmgmts.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Application State Service (AppSvc)Xapsvc.exeAdded by the W32/Rbot-FWW WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    AppMgmtXsvchost.exe -k AppMgmtAdded by the Fuwudoor TROJAN!
    AppnNodeLappnnode.exeRelated to IBM_Server Note: Located in C:\WINDOWS\system32\Drivers\
    ARC Plugin (ARCPLUG)Xarci.exeAdded by the W32/Tilebot-HB WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Steal information from Protected Storage
    ArcaBit NetMonitor (ABNetMon)LNetMonSV.exe ArcaVir an AntiVirus software from Poland. A procuct of ArcaBit Sp. z o.o
    ArchestrA Logger (aaLogger)LaaLogger.exeRelated to ArchestrA Software architecture for the integration of your automation systems.
    ARcltsrvLARCLTSRV.EXECryptography software by Algorithmic Research Ltd.
    Ares Chatroom server (AresChatServer)LchatServer.exeRelated to the Ares P2P software
    Argos Billing DialogLWorkstationMonitor.exeRelated to Argos_Billing_Dialog from Sepialine inc. Print Monitor. Note: Located in c:\Program Files\Sepialine\Argos Print Monitor\
    ArGoSoft Mail Server PlusLmailservernt.exeRelated to ArGo Software Design Mail Server
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    168ppm 0.243s (0.004s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer