CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    AutoMate 6 (AutoMate6)LAMTS.exeRelated to AutoMate from Network Automation. Tools necessary to completely automate business processes. Note: Located in C:\Program Files\AutoMate 6\
    Automatic LiveUpdate SchedulerLALUSchedulerSvc.exeRelated to to the Symantec LiveUpdate service which updates your Symantec products periodically.
    Automatic Update Service (Automatic Update)Xwuapi.exeAdded by the W32/Codbot-AC WORM! Note: This worm\trojan file is found in the System32 folder.
    automatic updates for Microsoft WindowsXwuauclt.exe W32/Sdbot-DFD Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Allows remote access. Makes multiple system changes. Read links for additional information
    Automatisches LiveUpdateLALUSchedulerSvc.exeRelated to to the Symantec LiveUpdate service which updates your Symantec products periodically.
    AutoStore (autostore)Lbatch.exeRelated to NSi's AutoStore from Notable Solutions, Inc. Capture documents and securely saving the content in your business applications.
    AutoUpdate (Windows Server AutoUpdate) XWinupdate.exe Troj/GrayBrd-CF Note: Located in %windir%\system32 Read the link, allows remote access and logs keystrokes
    AutoUpdateDLAutoUpdateD.exeRelated to Xcelera_Echo_Lab_Management Medical services from Philips.
    Av Update Monitor (AvSvcMonitor)LAvMonitor.exe Avast
    avast! AntivirusLashServ.exeRelated to Avast AntiVirus
    avast! iAVS4 Control Service (aswUpdSv)LaswUpdSv.exeRelated to Avast AntiVirus
    avast! iAVS4 Mirror HTTP Server (aswHTTPMirror)Lhttpd.exeRelated to Avast! anti-virus software. Note: Located in \%Program Files%\Alwil Software\Management Tools\mirror\
    avast! Mail ScannerLashMaiSv.exeRelated to Avast AntiVirus
    avast! Management ServerLavEngine.exeRelated to Avast! anti-virus software. Note: Located in \%Program Files%\Alwil Software\Management Tools\mirror\
    avast! Web ScannerLashWebSv.exeRelated to AWIL Software http://www.avast.com/
    Avast32 Start as Service?avserver.exeseems to belong to Avast anti-virus software
    AVCore (SrvMain)Xavservice.exeAs of yet Unknown Worm, Trojan or Malware. The file (avservice.exe) is found in the Documents and Settings\All Users\Application Data folder.
    Aventail Connect (As32Svc)Las32svc.exeRelated to Aventail_Corp
    Aventail VPN Client (NgVpnMgr)Lngvpnmgr.exeRelated to VPN_Tunnel Manager from Aventail Corporation. Note: Located in \%WINDIR%\System32\
    Aventail VPN Client (qqhuouaeu8auaraa)Xrojkxz.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    AVG Anti-Spyware GuardLguard.exe AVG Anti-virus product.
    AVG E-mail Scanner (AVGEMS)Lavgemc.exeRelated to AVG anti-virus
    AVG Firewall (AVGFwSrv)Lavgfwsrv.exeRelated to AVG_Firewall Note: located in C:\PROGRA~1\Grisoft\AVG7\
    AVG6 Service (AvgServ)Lavgserv.exeAVG 6 Anti virus
    AVG7 Alert Manager Server (Avg7Alrt)Lavgamsvr.exeRelated to AVG Anti-Virus.
    AVG7 Resident Shield Service (AvgCoreSvc)Lavgrssvc.exeRelated to Grisoft_AVG_Resident Shield Service. Note: Located in C:\PROGRAM Files\Grisoft\AVG7\
    AVG7 Update Service (Avg7UpdSvc)Lavgupsvc.exeUsed by the AVG 7 Antivirus program to keep your definitions up to do date. Note : For more information see AVG
    AVG8 Firewall (avgfws8)Lavgfws8.exeRelated to AVG_8_Firewall Note: Located in \%Program Files%\AVG\AVG8\
    AVG8 WatchDog (avg8wd)Lavgwdsvc.exeRelated to AVG_8_WatchDog Anti virus Note: Located in \%Program Files%\AVG\AVG8\
    avgav.exe (AVG)Xavgav.exe W32/Sdbot-DCT Read the link, allows remote access
    AVGFw2kvLavgfw2kv.exeAVG firewall
    Avid SDM Service (AvidSDMService)LAvidSDMService.exeRelated to Avid_SDM_Service from Avid Technology Note: Located in C:\WINDOWS\system32\
    Avid Startup (AvidStartup)LAvidStartup.exeAssociated with Avid_Digital_Media Products
    avinitntLavinitnt.exeRelated to Command AntiVirus for Windows Component, made by Command Software Systems, Inc. Which merged with Authentium in 2002.
    Avira AntiVir Premium MailGuard (AntiVirMailService)Lavmailc.exeRelated to Avira_AntiVir Premium MailGuard from Avira GmbH. Note: Located in \%Program Files%\Avira\AntiVir PersonalEdition Premium\
    Avira AntiVir Premium MailGuard helper service
    (AVEService)
    Lavesvc.exeRelated to Avira_AntiVir Premium MailGuard helper service from Avira GmbH. Note: Located in \%Program Files%\Avira\AntiVir PersonalEdition Premium\
    Avira AntiVir Premium WebGuard (antivirwebservice)LAVWEBGRD.EXERelated to Avira_AntiVir Premium WebGuard from Avira GmbH. Note: Located in \%Program Files%\Avira\AntiVir PersonalEdition Premium\
    AVK Service (AVKService)LAVKService.exeRelated to AntiVirenKit from G DATA Software AG. Virus protection program. Note: Located in \%Program Files%\\G DATA AntiVirenKit\
    AVK Wächter (AVKWCtl)LAVKWCtl.exeRelated to AntiVirenKit from G DATA Software AG. Virus protection program. Note: Located in \%Program Files%\\G DATA AntiVirenKit\
    AVKernelXAVKernel.exeRouge Anti-Virus Program. Made by WinSoftware, Ltd. For more information on WinAntiVirus 2005 Click_Here Note: Not recommended.
    AVKProxyLAVKProxy.exeRelated to AntiVirenKit from G DATA Software AG. Virus protection program. Note: Located in \%Program Files%\\G DATA AntiVirenKit\
    AVM FRITZ!web Routing Service (de_serv)Lde_serv.exeInstalled alongside DSL drivers from AVM Fritz's range of modem products. http://www.liutilities.com/products/wintaskspro/processlibrary/de_serv/
    AVM IGD CTRL ServiceLIGDCTRL.EXERelated to AVM_IGD_CTRL DSL Service. Note: Located in C:\Program Files\FRITZ!DSL\
    AVM WLAN Connection ServiceLWlanNetService.exeRelated to broadband products from avm.de
    avpLavp.exeRelated to Kaspersky_Anti-Virus Note: Located in \%Program Files%\Kaspersky Lab\Kaspersky Internet Security 7.0\
    AVP Control Centre ServiceLavpcc.exeKaspersky AntiVirus
    AVP UPDATE IONTERFACE A6 (avA6)XAVA6.SYSAdded by the DLOADER.AJQ TROJAN! Note: This has also been seen using the Display name AVP update interface A6. This trojan file is found in the System32 folder.
    AVP-SE Xavp-32.exe WORM_AGOBOT.FS Read the link, allows remote access
    AVPX TCP (avpx32)Xavpx32.sysAdded by the Troj/Haxdoor-AH TROJAN! Read the link, rootkit type stealth involved.
    AVPX64 TCP (avpx64)Xavpx64.sysAdded by the Troj/Haxdoor-AH TROJAN! Read the link, rootkit type stealth involved.

    Engine Version 2.0 by CastleCops

    spacer spacer