| Name | Status | Filename | Description |
|---|
| Service Scheduler | X | scheduler.exe | W32/Agobot-PH See Sophos
Unknown owner: Location: C:\WINDOWS\System32\scheduler.exe -service |
| Service Security Manager (scekrnl) | X | scekrnl.exe | Added by the Backdoor.Win32.Agent.alx TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Service Updater (servfjhf) | X | servfjhf.exe | Identified as Downloader.Agent.dxm by AVG Anti-Spyware Note: located in \%WINDIR%\ |
| Service1 | L | windowsserviceexample.exe | Related to Microsoft .Net Application. VB.NET_Forums |
| Service32 (Service Sequence) | X | services32.exe | Added by the W32/Tilebot-C
WORM!
Read the link, rootkit type stealth involved.
|
| Service: Access Remote PC Service 4.3 (RpcSvr4x) | O | rpcsetup.exe | Access_Remote_PC remote access software. Legitimate, but remote access could be considered dangerous unless monitored carefully. |
| Service: LicenseManagerReminder | L | LicenseManagerReminder.exe | Related to UIC License Manager a propriatiry Sofstware. Used to activate a software on customer computers for a specified length of time. Note: Located in C:\Program Files\Universal Instruments\License Manager\ |
| Service: Microsoft Net API (NETAPI) | X | ntps.exe | Added by the Backdoor.Win32.SdBot.aad as identified by Kaspersky. TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) |
| Service: Network Client (nwclnta) | X | netclna.exe | Troj/Boxed-I. Owner:Unknown. Location: C:\WINDOWS\system32\netclna.exe |
| ServiceHost32 | X | ServiceHost32.exe | Added by a variant of the IRCBOT Note: Located in \%WINDIR%\System32 Note: Use SDFix under supervision. |
| ServiceLayer | L | ServiceLayer.exe | Related to Nokia Connectivity Library software. Note: located in C:\Program Files\Common Files\PCSuite\Services\ |
| serviceMangr (tcphost.exe) | X | TCPHOST.EXE | Added by the SDBOT.CSG
WORM!
Read the link, rootkit type stealth involved.
|
| services | X | services.exe | W32/Sdbot-CXP Note: Located in %windir% Read the link, allows remote access |
| Services (Ini Service Ku) | X | services.com | Troj/Winlock-C |
| Services an controller-settings | X | services.exe | Added by the W32/Tilebot-HY WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. |
| Services Manager (svcmngr) | X | config.exe | Troj/DllLoad-C Read the link, steals information |
| services32 (Content List Management Sub System) | X | services32.exe | Added by the W32/Esbot-B
WORM!
Note: This worm\trojan file is found in the Windows or Winnt folder.
|
| Servicess_Server | X | Servicess.exe | A variant of the Feutel/Hupigon infection.
Note: rootkit type stealth involved. |
| Servicio Auto-Protect de Norton AntiVirus (navapsvc) | L | navapsvc.exe | Related to Norton/Symantec AntiVirus. |
| Servicio Bonjour (Bonjour Service) | L | mDNSResponder.exe | Create's a network of computers and smart devices. Made by Apple Computer, Inc. For more information Click_Here File location is in the Program Files\Gizmo Project folder. |
| Servicio COM de grabacióe CD de IMAPI | L | imapi.exe | Related to Image_Mastering_Applications_Programming_Interface from Microsoft used for CD recording. Note: Located in C:\WINDOWS\System32\ |
| Servicio COM de grabación de CD de IMAPI (ImapiService) | L | imapi.exe | Related to Image_Mastering_Applications_Programming_Interface from Microsoft used for CD recording. Note: Located in C:\WINDOWS\System32\ |
| Servicio de alerta | L | services.exe | Spanish Windows 2000 alert service. |
| Servicio de ayuda TCP/IP NetBIOS | L | services.exe | Spanish Windows 2000 Help service TPC/IP NetBIOS |
| Servicio de fax | L | faxsvc.exe | Spanish Windows 2000 fax service |
Servicio de uso compartido de red del Reproductor de
Windows Media (WMPNetworkSvc) | L | wmpnetwk.exe | Related to Windows_Media_Player Network Sharing Service.Note: Located in %ProgramFiles%\Windows Media Player\ |
| Servicio del administrador de discos lóos | L | dmadmin.exe | Spanish Windows 2000 logical disk manager administrative service |
| Servicio del administrador de discos lógicos (dmadmin) | L | dmadmin.exe | Related to Veritas logical disk manager |
| Servicio del iPod (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| Servicio RunAs | L | services.exe | Spanish Windows 2000 RunAs service |
| Serviço iPod (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| Servidor | L | services.exe | Spanish Windows 2000 "server" |
| Servidor de RPC de eTrust Antivirus (InoRPC) | L | InoRpc.exe | Associated with eTrust Antivirus/InoculateIT |
| Servidor de tareas de eTrust Antivirus (InoTask) | L | InoTask.exe | Associated with eTrust Antivirus/InoculateIT |
| Servidor de tiempo real de eTrust Antivirus (InoRT) | L | InoRT.exe | Related to eTrust's AntiVirus Internet Security solution. |
| Servies Unknow Srv | X | 001.exe | Win-Trojan/Downloader.6656.DW |
| Servizio iPod (iPod Service) | L | iPodService.exe | Related to Apple iPod. |
| Servizio Norton AntiVirus Auto-Protect | L | navapsvc.exe | Related to Norton Antivirus |
| sessionsim | X | sssnsml.exe | Troj/Dloadr-BBB
Also creates an additional service "typemgr2" |
| settings | X | SETTINGS.EXE | Added by the SDBOT.CHY
WORM!
Read the link, rootkit type stealth involved.
|
| SF FrontLine Drivers Auto Removal (v1) (sfrem01) | L | sfrem01.exe | Related to SF_FrontLine Drivers Auto Removal from Star-Force. Note: Located in C:\WINDOWS\system32\ |
| SFTRANSFER (SFTRANSFER) | X | (Unknown at this time.) | Added by the Backdoor.Brakkeshell
TROJAN!
Note: In the Description field under Services it wil show as: Secure file transfer protocol |
| SFUSVC | L | SFUSVC.exe | KYOCERA_MITA Scanner File Utility used with Kyocera Mita scanners/faxes. Note: located in C:\Program Files\Kyocera Mita\FileUtility\ |
| SgeCtl | L | SGECTL.EXE | Utimaco Safewares SAFEGUARD |
| Sharing Messenger Folders Windows XP (SMFWX) | X | bhagent.exe | W32/Sdbot-CZS Note: Located in %windir% Read the link, allows remote access |
| Sharp Device Manager Service | L | sdmservice.exe | Related to Sharp_Device_Manager printer service form Sharp. Note: Located in \%Program Files%\sharp\sharp device manager\ |
| SharpAccountant2 | L | SharpAccountant2Service.exe | Related to Sharp_Device_Manager printer service form Sharp. Note: Located in \%Program Files%\sharp\SharpAccountant2\ |
| Shavlik HFNetChkPro Service | L | HFNetChkProService.exe | HFNetChkPro distributes Microsoft patches to client machines |
| SHDSERV | L | shdserv.exe | Horizon DataSys Rollback Rx |
| Shiva VPN Client | L | icsrv.exe | Related to Eicon Networks Corporation |
