CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    SolidWorks Licensing Service (audieqaai)Xlmguh.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Sonica Theater Installer
    (SonicaTheaterInstallerService)
    LSTinst.exeRelated to Sonica_Theater from M-Audio. Turn your computer into a fully functional multiformat surround-sound monitoring environment. Note: Located in C:\Program Files\C:\Program Files\M-Audio Sonica Theater\Install\
    SonicStage Back-End ServiceLSsBeSvc.exeRelated to Sonic Stage Back-End service from SONY. Note: Located in \%Program Files%\Common Files\Sony Shared\AVLib\
    SonicStage SCSI Service (SSScsiSV)LSSScsiSV.exeRelated to Sony Corp.
    SonicStageMonitoringLSonicStageMonitoring.exeRelated to Sony GigaPocket multimedia entertainment center.
    SonicWALL Agent ServiceLswAgent.exeRelated to Network Associates, Inc.
    SonicWALL NetExtender Service (SONICWALL_NetExtender)LNEService.exeRelated to SonicWALL_NetExtender Service from SonicWall Inc. Note: Located in \%Program Files%\SonicWALL\SSL-VPN\NetExtender\
    SonicWall VPN Client Service (RampartSvc)LRampartSvc.exeSonicWall client for VPN access.
    Sony Network Analysis ToolXwinsony.exe W32/Spybot-NS Read the link, allows remote access
    Sony SCSI Helper ServiceLSonySCSIHelperService.exeRelated to Related to Sony Corporation.
    Sony SPTI Service (SPTISRV)LSptisrv.exeRelated to Sony Corporation
    Sony SPTI Service for DVE (ICDSPTSV)LIcdSptSv.exeRelated to Sony SPTI Service Note: Sony Inc. Located in C:\%WINDIR%\System32 (XP/WinNT/2K)
    Sony TV Tuner ControllerLhalsv.exeSony computers
    Sony TV Tuner ManagerLRM_SV.exeSony computers
    Sony TVTA ManagerLSMceMan.exeRelated to Sony Corporation.
    Sophos AgentLManagementAgentNT.exeRelated to Sophos AntiVirus protection software.
    Sophos Anti-VirusLSWEEPSRV.SYSBy Sophos Plc
    Sophos Anti-Virus (SAVService)LSavService.exeRelated to Sophos AntiVirus protection software.
    Sophos Anti-Virus (SWEEPSRV.SYS)LSWEEPSRV.SYSSophos Virus protection program. http://www.sophos.com/support/knowledgebase/article/378.html
    Sophos Anti-Virus NetworkLSWNETSUP.EXEBy Sophos Plc
    Sophos Anti-Virus status reporter (SAVAdminService)LSAVAdminService.exeRelated to Sophos AntiVirus protection software.
    Sophos Anti-Virus UpdateLSWUPDATE.EXEBy Sophos Plc
    Sophos AutoUpdate AgentLAutoUpdateAgentNT.exeRelated to Sophos AntiVirus protection software.
    Sophos AutoUpdate ServiceLALsvc.exeRelated to Sophos AntiVirus protection software. Auto Update service.
    Sophos Cache Manager (CacheMgr)Lcachemgr.exeRelated to Sophos AntiVirus protection software. Remove Update service.
    Sophos Database Notification Service (sdbnsrvc)LSdbnsrvc.exeRelated to Sophos_Control_Center a central console that permits administration of Sophos Anti-Virus SBE over the entire network from one location. Note: Located in C:\Program Files\Sophos\Control Center\
    Sophos EMLibUpdate AgentLEMLibUpdateAgentNT.exeRelated to Sophos_Remote_Management_System from Sophos. Note: Located in \%Program Files%\Sophos\SCC\Remote Management System\
    Sophos Management ServiceLMgntSvc.exeRelated to Sophos_Remote_Management_System from Sophos. Note: Located in \%Program Files%\Sophos\SCC\
    Sophos Message RouterLRouterNT.exeRelated to Sophos AntiVirus protection software.
    Sophos SBE Certification ManagerLCertificationManagerServiceNT.exeRelated to Sophos_Control_Center a central console that permits administration of Sophos Anti-Virus SBE over the entire network from one location. Note: Located in C:\Program Files\Sophos\Control Center\
    Sophos SBE ManagementServiceLSbeMss.exeRelated to Sophos_Control_Center a central console that permits administration of Sophos Anti-Virus SBE over the entire network from one location. Note: Located in C:\Program Files\Sophos\Control Center\
    Sound Sservice Driver (Sound Service)Xcfmon.exeSee Here
    SoundMAX Agent Service (SoundMAX Agent Service
    (default))
    LSMAgent.exeSoundMAX Sound Device
    SP Software InstallerLsp_SWIns.exeSmartPipes SecureSite is a scalable, reliable, and secure software platform for the creation and management of advanced IP services. - http://www.smartpipes.com/SecureSite.htm
    SPAMfighter Update ServiceLsfus.exeRelated to SPAMfighter from Spamfighter for Microsoft Outlook, Outlook Express and Windows Mail. Note: Located in \%Program Files%\SPAMfighter\
    SPBBCSvcLSPBBCSvc.exeRelated to Symantec Internet security suite and assists in keeping your computer up to date from Internet bound viruses.
    SPCSUtilityServiceLSPCSUtilityService.exeRelated to Sprint_Sierra_Wireless service. Note: Located in C:\Program Files\Sprint\Sierra Wireless\Sprint PCS Connection Manager\
    spdcheckXSPDCHECK.EXEAdded by the SDBOT.BZE WORM! Read the link, rootkit type stealth involved.
    Spectrum24 Event Monitor (S24EventMonitor)LS24EvMon.exeIntel Corporation
    Speed Disk serviceLnopdb.exeNorton Speed Disk
    SpeedTouch 330 Manager (st330service)Lst330service.exeRelated to SpeedTouch_330_Manager from THOMSON Telecom. Note: Located in \%Program Files%\Thomson SpeedTouch/ST330/service/
    spkrmonLspkrmon.exeSoundMAX SpeakerMonitor service
    SPM License Server (spmd)Lspmd.exeRelated to SPM_License from mental images GmbH. RealityServer® is the unique server-based, scalable infrastructure software platform for creating and deploying 3D Web Services and other applications and application Note: Located in C:\WINDOWS\System32\spm\
    SPM License Server (spmd)Lspmdib.exe Related to Software_Protection_Manager from SoftImage. Note: Located in C:\WINDOWS\system32\spm\
    spmgrLspmgr.exeRelated to Sony VAIO/ASUS laptops and provides additional configuration options for these devices. This program is non-essential process to the running of the system, but should not be terminated unless suspected to be causing problems.
    spoolXspoollv.exeAdded by the W32/Sdbot-AES WORM! Note: This worm\trojan file is found in the Windows or Winnt folder. Read the link, rootkit type stealth involved.
    spoolXSPOOLLV.EXEAdded by the SDBOT.CTI WORM! Note: This worm file is found in the System32 folder. (NT/2000/XP) Read the link, rootkit type stealth involved.
    Spool SubSystem AppXlsass.exeAdded by the W32/Tilebot-HD WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.)
    SpoolServiceXspolsv.exe -servicePossibly added by a W32/Agobot variant.
    SpoolsvXspoolsv.exeAdded by the Troj/IRCBot-VA TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\

    Engine Version 2.0 by CastleCops

    spacer spacer