CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Still image serviceXstisvc.exeAdded by an unknown variant of a backdoor TROJAN! Note: This \trojan is located in \%WINDIR%\ Not to be confused with Microsoft's stisvc.exe for Still image camera service found in \%WINDIR%\System32\ folder.
    stllssvrLstllssvr.exeRelated to SureThing_CD_Labeler from MicroVision Development, Inc. designed for MP3 and DVD buffs Note: Located in C:\Program Files\Common Files\SureThing Shared\
    STOPzilla Local ServiceLszntsvc.exeStopzilla Popup Blocker
    STOPzilla Service (szserver)LSZServer.exeRelated to STOPzilla service.
    Streamload Service (StreamloadService)LStreamloadService.exeRelated to Streamload_Service from Streamload, Inc. Backs up your files and syncs files between computers. Note: Located in C:\Program Files\Streamload\MediaMax XL\
    Stuffit Archive Name ServiceLArcNameService.exe Allows StuffIt 11 to keep a quickly updated list of all .zip and .sitx files (and other file types it supports), on the given PC. This is used with the 'Manage Archives' view, in StuffIt 11, to provide the user with a current list of all archive files they have.
    stunnelLaa-stunnel.exeRelated to Stunnel encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer)
    StyleXPServiceLStyleXPService.exeRelated to StyleXP, a skinning program for Windows XP
    subway1113.3322.orgXsubway1113.3322.org.exe Troj/Rincux-B Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Sun One Administration Server 5.2 (admin52-serv)Lns-httpd.exeRelated to Sun_One Administration server
    Sun ONE Directory Server 5.2 (config52)
    (slapd-config52)
    Lns-slapd.exeRelated to Sun_One directory server
    Sun ONE Directory Server 5.2 (data52) (slapd-data52)Lns-slapd.exeRelated to Sun_One directory server
    Sun ONE Web Server 6.1 (https-NASSRY) (https-NASSRY)Lwebservd-wdog.exeRelated to Sun_ONE_Web_Server from Sun Microsystems, inc. Note: located in C:\Sun\WebServer6.1\bin\https\
    Sun ONE Web Server 6.1 Administration Server
    (https-admserv61)
    Lwebservd-wdog.exeRelated to Sun_ONE_Web_Server from Sun Microsystems, inc. Note: located in C:\Sun\WebServer6.1\bin\https\
    Sunbelt CounterSpy Antispyware (SBCSSvc)LSBCSSvc.exeRelated to Scan_Service from Sunbelt Software belonging to CounterSpy. Note: Located in C:\Program Files\Sunbelt Software\CounterSpy\
    Sunbelt Kerio Personal Firewall 4 (KPF4)Lkpf4ss.exeRelated to Kerio Personal FireWall.
    Sunbelt Personal Firewall 4 (SPF4)Lkpf4ss.exeRelated to Sunbelt Personal FireWall. Previously Kerio. Note: Located in \%Program Files%\Sunbelt Software\Personal Firewall\
    Super Ad Blocker Service (SABSVC) LSABSVC.EXERelated to SuperAdBlocker.com
    SuperProServerLspnsrvnt.exeRelated to Safenet programs or services. Licated in C:\SuperPro\Server\WinNT\spnsrvnt.exe
    SupportSoft RemoteAssistLssrc.exeRelated to SupportSoft Remote Assist from SupportSoft, Inc.Assist End-Users Resolve Technical Problems via Remote Control. Note: Located in \%Program Files%\Common Files\supportsoft\bin\
    SupportSoft Sprocket Service (dellsupportcenter)
    (sprtsvc_dellsupportcenter)
    Lsprtsvc.exeRelated to SupportSoft Live technical computer support service. Note: Located in \%Program Files%\Dell Support Center\bin\
    SupportSoft Sprocket Service (medicsp2)
    (sprtsvc_medicsp2)
    Lsprtsvc.exeRelated to SupportSoft Live technical computer support service. Note: Located in \%Program Files%\twc\medicsp2\bin\
    SupportSoft Sprocket Service (nxpclient)
    (sprtsvc_nxpclient)
    Lsprtsvc.exeRelated to SupportSoft Live technical computer support service. Note: Located in \%Program Files%\Airtel\NetXpert\bin\
    SupportSoft Sprocket Service (O2) (sprtsvc_O2)Lsprtsvc.exeRelated to SupportSoft Live technical computer support service. Note: Located in \%Program Files%\O2\bin\
    SurveyorLSurveyor.EXERelated to compaq products
    svahostXsvahost.exeAdded by the Backdoor.Win32.SdBot.aad as identified by Kaspersky TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    SVC Module (SVC Module)Xsvchost.exeAdded by the W32/Sdbot-ADG WORM! Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.) This worm file is found in the Windows or Winnt folder.
    svchoct.exe (yuto)Xsvchoct.exeAdded by the Troj/Sdbot-LI TROJAN! Note: located in C:\Windows\ (Win9x/Me,XP), C:\Winnt\ (WinNT/2K)
    svchostLinetdll.exeUnknown to me...
    svchostXsvchost.exe Troj/Hupigon-CK Note: Located in %windir% Read the link, allows remote access
    SVCHOSTXsvchost.dll Troj/Agent-GCZ Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (Vista/XP/WinNT/2K)
    svchostXservices.exeUnknown malware TROJAN!. Note: located in \%WINDIR%\config\install\
    svchost.exeXsvchostAdded by the Troj/Hupigo-AF Trojan Read the link, allows remote access
    svchost.exeXsvchost (no file extension) Troj/Hupigo-AF Note: Located in C:\Windows The file will show no extension
    svchost.exe (moto)X(Random 18-character filename)Added by the Troj/Agent-MD TROJAN!
    svchost.exe (moto)Xsvchost.exeAdded by the Troj/Agent-MD TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\
    svchost.exe (svchost.exe)Xsvchost.exeAdded by the Troj/GrayBird-X TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
    sviceXtxkernel.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\iis] (Win9x/Me), C:\%WINDIR%\System32\iis\ (XP/WinNT/2K) More similar_to
    SVKP (SVKP)XSVKP.sysAdded by the W32/Rbot-AGP or W32/Spybot-FB or W32/Rbot-AJR WORM!
    Sweep for Windows NT NetworkLSWNETSUP.EXESophos AntiVirus Sweep Service
    Sweep for Windows NT UpdateLSWUPDATE.EXESophos AntiVirus Update Service
    SwiftPublish Authorization ServiceLspauthserv.exeRelated to SwiftView, Inc.
    SwiWiFiCommLswiwificomm.exeRelated to Sierra_Wireless_AirCard 580. Access the Wireless Web. Note: Located in \%Program Files%\Sierra Wireless\AirCard 580\Generic\Components\
    SWSetup (WindowsUpdate)Xwinrar.exe Troj/GrayBrd-CQ Copies itself to %Windows% directory
    SwupdtmrLswupdtmr.exeRelated to Toshiba Software Update Manager. Handles the updating of software.
    SX Service (SXServ)Xsxserv101.exeAdded by the Windir_SXS TROJAN! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    SX Service (SXServ)Xservmswin.exeAdded by the W32/Delf.THK.dropper. Drops the file servmswin.exe in the WINDOWS\System32 folder.
    Sybase EP Management AgentLsybjsvc.exeRelated to EP_Management_Agent from Sybase. Note: Located in C:\Program Files\Sybase\shared-1_0\bin\
    Sygate Personal Firewall (SmcService)Lsmc.exeRelated to Sygate Firewall.
    Sygate Personal Firewall Pro (SmcService)Lsmc.exeRelated to Sygate Firewall.

    Engine Version 2.0 by CastleCops

    spacer spacer