CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Print Spooler Service (SpoolSvc206)Xmlsdf8hiloswaejo.exeAdded by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx
    Print Spooler Service (SpoolSvc207)Xsklrr7y7497903.exeAdded by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx
    Print Spooler Service (uuiy84eiye0iuo)Xrsbmsc.exeListed as Win32.Malware.gen by Prevx here
    Print2EmailXpdf.exeAdded by a variant of the Backdoor.Sdbot Note: Located in \%WINDIR%\ Note: Use SDFix under supervision.
    Printer Spooler (printspool)Xspooler32.exeAdded by the W32/Sharp-L WORM! Note: This worm\trojan file is found in the Windows or Winnt folder.
    Printer Spooler Service (Random Name)Xrandom filename Troj/Ccdip-B
    PRISMSVCLPRISMSVC.EXERelated to PRISM_Wireless_LAN Service from Conexant Systems, Inc. Note: Located in \%WINDIR%\System32\
    PrismXLLPRISMXL.SYSThe PrismXL service lets the Client deploy Tasks on a target computer regardless of the current user.s permissions.
    PrivacyView Service (PVService)LPVService.exeRelated to Privacy_View software, encrypts files, folders and Internet files. File is normally located in the Program Files\File System Information\SystemFolder folder.
    Private Folder Service (prfldsvc)LPrfldSvc.exePrivate Folder 1.0 was released by Microsoft on the 6th July but Microsoft officially withdrew its support of Private Folder and removed it from their website 10 days later due to negative feedback. More The program can still be downloade from third party sites. Note: Located in C:\Program Files\Microsoft Private Folder 1.0\
    Privilege Win32 ServerLPLServ.exeRelated to Aladdin Knowledge Systems. Located in the Windows or Winnt\System32 folder.
    Procedure Distribution ServiceXprsvr.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Process Activity Monitor (paamsrv)Lpaamsrv.exeActivity Monitor belonging to the Privacy Expert Suite Software from Acronis.
    Process Manager Lprocess_manager_nt.exeSoftware application for mining and related extractive industries and produces two ranges of products under the Datamine and Earthworks labels. Note: Located in C:\Program Files\Common Files\Earthworks
    Process Monitor (LVPrcSrv)LLVPrcSrv.exeRelated to Logitech QuickCam Provides additional configuration options for these devices. Note: Located in \%Program Files%\common files\logishrd\lvmvfm\LVPrcSrv.exe
    Process Task ManagerXsvhost.exeAdded by a variant of the W32/SDBOT WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\ (XP/WinNT/2K)
    ProcessEnumerator32 (pe32)Xfi49.exeAdded by the W32/Sdbot-ACN WORM! Read the link, rootkit type stealth involved.
    ProductivIT Service (ProductivITService)LTEKS_Service.exeRelated to DynTeck Inc.
    Proficy HMI/SCADA iFIX server (FIX)Lfixsrv.exeRelated to Related to GE_Fanuc_Automation enable you to act in real-time to optimize productivity and increase profitability. Note: located in C:\Program Files\GE Fanuc\Proficy iFIX\
    Proficy Licensing (CCFLIC0)LCCFLIC0.exeRelated to GE_Fanuc_Automation enable you to act in real-time to optimize productivity and increase profitability. Note: located in C:\Program Files\GE Fanuc\Proficy Common\Proficy Common Licensing\
    Program Learning Management System (PLMS)Xplms.exeAdded by a variant of the Backdoor.Sdbot Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    Programador de LiveUpdate automáticoLALUSchedulerSvc.exeRelated to to the Symantec LiveUpdate service which updates your Symantec products periodically.
    Programador de tareasLMSTask.exeSpanish Windows 2000 task scheduler
    ProgramCheckerPro (sassvc)Lsassvc.exeRelated to ProgramChecker Tool to analyze, validate, authenticate and research the programs that run on their PCs.
    Prolific HotFix Q0306270LHotFixQ0306270.exeHotFix Q0306270 Prolific Technology Inc. USB Flash Disk
    Promise Array Message Agent (RAIDmAgt)LMsgAgt.exePromise RAID Message Agent for Promise RAID Disk Controllers
    Promise Array Message Server (RAIDmSvr)LMsgSvr.exeRelated Promise Technology, Inc. RAID Message Server
    Promise FastTrak Log Service (FastTrakSvc)LFtrakSvc.exeReported as a RAID driver program by Promise_Technology_Inc
    Promise RAID message agent (RAIDmAgt)LMsgAgt.exePromise RAID Message Agent for Promise RAID Disk Controllers
    Protected Exchange (MainService)Xloadsvc.exeAdded by the Troj/Urbin-C TROJAN!
    Protected Storage (ProtectedStorage)Llsass.exeRelated to Protected_Storage for Servers Note: Located in \%WINDIR%\system32\
    ProtectedStorageXsvchost.exe -k ProtectedStorageAdded by the Fuwudoor TROJAN!
    ProtectionServiceLProtectionService.exeRelated to EarthLink's protection centre
    Protector Plus Anti-virus Monitor ServiceLPPAVMon.exeRelated to Proland Software. - http://www.pspl.com/
    Protector Plus ServiceLPPServ.exeRelated to Proland Software. - http://www.pspl.com/
    Protector Suite Virtual Token (vtserver)Lvtserver.exeRelated to UPEK biometric protector suite
    Protexis Licensing V2 (PSI_SVC_2)LPsiService_2.exeRelated to Protexis_Licensing from Protexis Inc. Note: Located in \%Program Files%\Common Files\Protexis\License Service\
    ProtexisLicensingLPSIService.exeAdded by the Protexis Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Protocol_Catalog9 Xrsvp32_2.dll Win32/Zhelatin.worm.96845
    Proveedor de asistencia de seguridad LM de Windows NTLlsass.exeSpanish Windows 2000 NT LM security support provider
    Provides three management service (FreeBSD)Ldev32.exeFreeBSD is an advanced operating system for x86 compatible. It is derived from BSD, the version of UNIX® developed at the University of California, Berkeley. - http://www.freebsd.org/
    ProxyServer Service (ProxyServerService)Lrtpxsr.exeRelated to IBM Rational Software Development Platform
    PRTG 4 Service - Paessler Router Traffic Grapher
    (PRTG4Service)
    Lprtg4.exeRelated to Paessler Router Traffic Grapher - http://www.paessler.com/
    PsYXservice.exeIdentified as the Backdoor.Win32.Iroffer malware. Note: Located in \%WINDIR%\System32\PsY\
    PTBSyncLPTBSync.exeProgram features a atom time adjusted clock, shows day and date in the taskbar and has a calendar function Note: Located in C:\Program Files\PTBSync
    ptlgXptlg.exeAdded by SpywareRemover a ROGUE program. Note: Located in \%WINDIR%\System32\
    ptssvc - KODAKLptssvc.exe installed alongside the drivers for Kodak's range of digital cameras
    Pure Networks Net2Go Service (nmraapache)Lnmraapache.exeRelated to Pure_Networks_Net2Go Service from Pure Networks, Inc. Note: Located in C:\Program Files\Pure Networks\Network Magic\WebServer\bin\
    Pure Networks Network Magic Service (nmservice)Lnmsrvc.exeRelated to Network_Magic home network managing program. Made by Pure Networks, Inc.
    Pure Networks Router Manager (pnrouter)Lpnroutsv.exeRelated to Network_Magic home network managing program. Made by Pure Networks, Inc.

    Engine Version 2.0 by CastleCops

    spacer spacer