CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    SafeBootAgentOsrvany.exeMicrosoft Windows application which allows an executable to be run as a service. If you have installed this service, fine, otherwise investigage. Can be used to load Malware.
    SafeGuard Easy Client (SgeClient)LSgeClient.exeRelated to SafeGuard_Easy Hard Disk Encryption from Utimaco. Note: Located in C:\Program Files\Utimaco\SafeGuard Easy\
    SafeGuard Easy Workstation Server (WksCfgSrv)LWksCfgSrv.exeRelated to SafeGuard_Easy Hard Disk Encryption from Utimaco. Note: Located in C:\Program Files\Utimaco\SafeGuard Easy\
    SafeGuard SGLOG Player (SgLogPlayer)LSgLogPlayer.exeRelated to SafeGuard_Easy Hard Disk Encryption from Utimaco. Note: Located in C:\WINDOWS\system32\
    SafeNet IKE Service (IREIKE)LIreIKE.exeRelated to Microsoft Virtual Private Network Client.
    SafeNet Monitor Service (IPSECMON)LIPSecMon.exeRelated to Microsoft Corp. Feature of the Layer Two Tunneling Protocol (L2TP).
    Samsung Update PlusLSLUBackgroundService.exeRelated to Samsung_AV_Station instant Playback of music photos, videos.
    SAMSvc (Security Account Manager)XSAMSvc.exeAdded by the W32/Tilebot-DL, WORM!
    Sandboxie Service (SandboxU)LSandboxieServer.exeRelated to SandBoxie Sand box application. Data may flow from the hard disk into the sandbox. But data never flows back from the sandbox into the hard disk. Note: Located in C:\Program Files\Sandboxie\
    Sandboxie Service (SbieSvc)LSbieSvc.exeRelated to Sandboxie Service. Intercepts changes to both your files and registry settings, making it virtually impossible for any software to reach outside the sandbox. Note: Located in \%Program Files%\Sandboxie\
    Sandra Data Service (SandraDataSrv)LRpcDataSrv.exeSiSoftware Sandra Lite 2005
    Sandra Service (SandraTheSrv)LRpcSandraSrv.exeSiSoftware Sandra Lite 2005
    Sansa Updater Service (SansaService)LSansaSvr.exeRelated to Sansa_Updater Service from Sandisk. Note: Located in C:\Program Files\SanDisk\Sansa Updater\
    SAP Business One BackUp Service (SBOBackUp)LB1backUp.exeL Related to SAP Business One gives you the information you need to select and implement business management software. Note: Located in \%Program Files%\SAP\SAP Business One ServerTools\BackUp\
    SAP Business One DI Server (SBODI_Server)LB1DI_Server.exeRelated to SAP_Business_One gives you the information you need to select and implement business management software. Note: Located in \%Program Files%\SAP\SAP Business One ServerTools\DI_Server\
    SAP Business One Early Watch Alert (B1EwaService)LEwaService.exeRelated to SAP Business One gives you the information you need to select and implement business management software. Note: Located in \%Program Files%\SAP\SAP Business One ServerTools\EWA\EwaService.exe
    SAP Business One License Manager 2005 (B1Lic2005)LB1License.exeL Related to SAP Business One gives you the information you need to select and implement business management software. Note: Located in \%Program Files%\SAP\SAP Business One ServerTools\License\
    SAP DB WWW (SAPDBWWW)Lwahttp.exeRelated to SAP_MaxDB The SAP Database System. Note: Located in \%Program Files%\SAPDB\indep_prog\web\pgm\
    SAPDB: WEB (SAP DBTech-WEB)Lkernel.exeRelated to SAP_MaxDB The SAP Database System. Note: Located in \%Program Files%\SAPDB\DEPEND\pgm\
    SAVRoam (SavRoam)LSavRoam.exeRelated to Norton/Symantec AntiVirus
    SAVScanLSAVScan.exeRelated to Norton AntiVirus Note: Located in \%Program Files%\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    sbchosy.batXsbchosy.batAdded by the Troj/GrayBir-AA TROJAN! Note: This trojan file is found in the Windows\Program Files or Winnt\Program Files folder.
    SBHookSvcLSBHookSvc.exeRelated to Motive_Communications Broadband service. Note: Located in C:\PROGRAM FILES\NETASSISTANT\SMARTBRIDGE\
    SBRLLA For FM Advisor (SBRLLA)LSBRSVC.EXERelated to SBRLLA_For_FM_Advisor FUJITSU computer. Note: Located in \%Program Files%\Fujitsu\sa\api\
    SBSD Security Center Service (SBSDWSCService)LSDWinSec.exeRelated to SpyBot_and_Destroy Security Center Service integration with Vista Windows Security Center. Microsoft ships Windows Defender with Vista, however, Spybot-S&D can now easily integrate into the Vista Security Center; which will then monitor if Spybot-S&D is up-to-date and whether the permanent protection (TeaTimer) is running or not. This update will only show on Vista systems, since previous Windows versions do not offer anti malware integration into WSC. Note: Located in \%Program Files%\Spybot - Search & Destroy\
    SCA (Service Control Application)XSYSTEM.EXEUnknown virus
    scheduler (schedul3.exe)Xschedul3.exeAdded by the W32/Rbot-AVX TROJAN! Note: This worm\trojan file is found in the Windows or Winnt folder. Read the link, rootkit type stealth involved.
    Scheduling Agent (Mstinit)Xmstinit.exeAdded by the W32/Tilebot-IO WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    schscntLschscnt.exeRelated to Command AntiVirus for Windows Component, made by Command Software Systems, Inc. Which merged with Authentium in 2002.
    SCNDmem (winlow)Xwinlow.sysAdded by the Troj/Haxdoor-AF TROJAN!
    Scorer Service (ScorerService)Lstscor.exeRelated to Sentry_At_Home Parental Controls software. Note: Located in \%WINDIR%\System32\
    Scribe AdminServerLAdminServer.exeRelated to Scribe Admin. Server. Data integration between Salesforce and Microsoft Dynamics GP. Note: Located in \%Program Files%\Scribe\
    ScriptBlocking Service (SBService)LSBServ.exeRelated to Norton/Symantec AntiVirus.
    ScriptLogic Service (SLClient)LslClient.exeRelated to ScriptLogic Remote management and control for I.T. personnel. Note: Located in \%WINDIR%\System32\
    ScsiAccessLScsiAccess.EXEAlcohol Software's CD/DVD writing application
    SCSMS32 (SCSMS)Xscmsm32.exeAdded by the SDBOT.CCN or SDBOT.CEZ WORM! Read the link, rootkit type stealth involved.
    SCWatch 4.0Lscwatch4.exeRelated to White Canyon - protect against identity theft software. - http://www.whitecanyon.com/index.php
    SDCAgentLESRVANY.EXERelated to Service_Deliver_Center from IBM Global Services, SRM (Server Resource Management). Note: Located in \%Program Files%\SDC\
    SDJB ManagerLsdjbmgr.exePanasonic\SD-JukeboxV3
    sdkXlsass.exe W32/Sdbot-DEF Read the link, allows remote access
    sdktempXMicrosoft.exeAdded by the SDBOT.CGM WORM! Read the link, rootkit type stealth involved.
    sdktemp (sdktemp)XSDKTEMP.EXEAdded by the W32/Tilebot-A WORM! Read the link, rootkit type stealth involved.
    sdktemp (sdktemp)Xaxdcfasb.exeAdded by the W32/Sdbot-AGI WORM! Read the link, rootkit type stealth involved.
    SDPAUMS server serviceLsdpasvc.exeMatsushita Electric Industrial Co.,Ltd.
    SDServiceLSDService.exeRelated to Spyware_Detector from Max Secure. Note: Located in C:\Program Files\SpywareDetector\
    Seagate CommunicationXseagatecom.exeAdded by the W32/Spybot-NF WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\dllcache\ (XP/WinNT/2K)
    Seagate Page Server (pageserver)Lpageserver.exeRelated to Seagate Page Server. Now owned by Business_Objects Note: Located in C:\Program Files\Seagate Software\WCS\
    Seagate Web Component Server (WebCompServer)LWebCompServer.exeRelated to Seagate Web Component Server. Now owned by Business_Objects Note: Located in C:\Program Files\Seagate Software\WCS\
    Search Engine Commando Schedule ServiceLScheduleService.exeRelated to Search Engine Commando
    SecdrvXsecdrv.sys Troj/Pushu-Gen Note:Located in C:\Windows\System\Drivers (Win9x/Me), C:\%WINDIR%\System32\Drivers (XP/WinNT/2K) May also have an additional services installed. Read link

    Engine Version 2.0 by CastleCops

    spacer spacer