CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    avsincL
    avsuite (mssuite)Xmsuite.exeAdded by the W32/Sdbot-ABC WORM! Read the link, rootkit type stealth involved.
    AVSync Manager (AvSynMgr)LAvsynmgr.exeFrom McAfee VirusScan version 5.x. Runs VirusScan System Tray (Vsstat.exe), WebScanX (Webscanx.exe), VirusScan System Scan (Vshwin32.exe) and VirusScan Console (Avconsol.exe) under one application
    AVupdate service interface X2 (avupdate2)Xavupdate2.sysAdded by the Troj/Hanlo-A TROJAN! Note: This trojan file is located in the System32 folder.
    AvUpdSvcLavupdsvc.exePart of Avast! anti-virus software
    Axon Service (AxonService)Laxon.exeRelated to Axon_Service from NCH Swift Sound. A VoIP based PBX designed to manage calls in a business or call center. Note: Located in \%Program Files%\NCH Swift Sound\Axon\
    Axon Service (oxuuaeyz12a)Xsujxtnexes.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    “RDRIVâ€Â (rdriv)XRDRIV.SYSAdded by the TROJ_ROOTKIT.E TROJAN! Read the link, rootkit type stealth involved.
    B's Recorder GOLD Library General Service (bgsvcgen)Lbgsvcgen.exeRelated to B_H_A_Corp B' Recording Gold for CD/DVD burning and authoring software.
    Backbone Service (BBDemon)LCATSysDemon.exeRelated to Dassault_Systemes CAD, PLM solutions make it possible to design and develop products by creating digital mockups. Note: Located in \%Program Files%\Dassault Systemes\B16\intel_a\code\bin\
    Background Intelligent Transfer Service (BITS)Lqmgr.dll Part of Windows Vista Note:Located in C:\%WINDIR%\System32
    Background Intelligent Transfer Service mircosoft 32Xsystemza32.exeAdded by a variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Note: located in \%WINDIR%\
    BackOnTrack Callback Service (BOTCbs)Lbcbs_xp.exeRelated to BackOnTrack from System OK. Note: Located in C:\Program Files\SystemOK\BackOnTrack\WinXP\
    Backup Exec 8.x Alert Server (BackupExecAlertServer)LalertServer.exeRelated to Veritas Software backup tool.
    Backup Exec 8.x Notification Server
    (BackupExecNotificationServer)
    Lnsvr.exeRelated to Veritas Software backup tool.
    Backup Exec Agent Browser (BackupExecAgentBrowser)Lbenetns.exeRelated to the Backup Exec application from Veritas http://www.liutilities.com/products/wintaskspro/processlibrary/benetns/
    Backup Exec Device & Media Service
    (BackupExecDeviceMediaService)
    Lpvlsvr.exeRelated to Veritas Backup Exec and offers essential functionality for Backup Exec. http://www.processlibrary.com/directory/files/pvlsvr/index.php
    Backup Exec Job Engine (BackupExecJobEngine)Lbengine.exeBackup service for Veritas Backup Exec. This program is essential in keeping backups up to date and should not be terminated. http://www.processlibrary.com/directory/files/bengine/index.php
    Backup Exec Naming Service (BackupExecNamingService)Lbenser.exeVeritas Software Corporation. This is the Backup Exec naming service which is needed in order to achieve some backups and restores. http://www.processlibrary.com/directory/files/benser/index.php
    Backup Exec Remote Agent for Windows Servers
    (BackupExecAgentAccelerator)
    Lberemote.exeprocess that belongs to Backup Exec from Veritas http://www.liutilities.com/products/wintaskspro/processlibrary/beremote/
    Backup Exec Server (BackupExecRPCService)Lbeserver.exeRelated to Veritas Backup Exec. This program is essential in keeping backups up to date and should not be terminated. http://www.processlibrary.com/directory/files/beserver/index.php
    BackupClientSvcLBackupClientSvc.exeRelated to NovaNet_WEB NovaStor Corp. Online Backup Services.
    Base Filtering Engine (BFE)Lbfe.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Basics ServiceLSyncServicesBasics.exeRelated to Seagate Sync Services. Note: Located in \%Program Files%\Seagate\Basics\Service\
    bbc (cnn) Ximsins.exe Troj/Hupigon-U
    BBM Ticket Service (BBMTicketService)Lticketservice.exeRelated to Business_Manager service From Clearly Business. Note: Located in \%Program Files%\Barclays\Business Manager\bin\
    bbserverXbbserver.exe Troj/Hupigon-PS Note: Located in %windir% Read the link, allows remote access
    BCL easyPDF SDK Loader (bepprldr)Lbepprldr.exeRelated to easyPDF from BCL Technologies. Printer Driver makes it very easy and affordable to convert any document formats (including Word, Excel, and Powerpoint) to PDF. Note: Located in \%Program Files%\Common Files\BCL Technologies\easyPDF 4\
    bcrcogqrkykoXmueyzrua5.exe
    bcveServLbcveserv.exeRelated to BestCrypt from Jetico, Inc. Keeps your confidential data in a strongly encrypted form on your disk and provides you with transparent access. Note: Located in \%Program Files%\BestCrypt\BC_VE\
    BeatJam Music Server - HTTP
    (BeatJamMusicStreamingServer)
    LBeatJamHttpService.exe See_BeatJam BeatJam Music Server Edition.
    BeatJam Music Server - UPnP (BeatJamUPnPMusicServer)LBeatJamUPnPService.exe See_BeatJam Justsystem audio software BeatJam.
    Belkin Wireless USB Network Adapter (Belkin Wireless
    USB Network Adapter Service)
    LWLService.exeRelated to Belkin's Wireless USB. Note: Located in \%Program Files%\Belkin\Belkin Wireless Network Utility\
    Bell & Howell Database Manager (dbmang)LDBMANG.EXERelated to Bell_and_Howell
    Bell & Howell Monitor Service (BHMonitorService)Lmonitor.exeRelated to Bell_and_Howell
    BelMonitor Service (BelMonitorService)LBANTMonitorSvc.exeRelated to Belarc, inc.
    BES Client (BESClient)LBESClient.exeRelated to BESClient by BigFix Inc
    BeTwin Terminal Services (TermService)Lwcsdmxp.exeRelated to BeTwin Terminal Services. Software that allows multiple users to simultaneously and independently share a personal computer. Note: Located in \%WINDIR%\System32\
    Beyond Remote ServerOBRServer.exeBeyond Remote Remote Legitimate, but allows remote access so should be removed if it was not intentionally installed
    BGS_SDServiceLBGS_SDservice.exeRelated BMC Software, Inc. - http://www.bmc.com/
    bh611LNT611SVC.EXERelated to Bell_and_Howell
    BigPond Broadband Cable LoginLbpcService.exeTelstra's BIGPOND_BROADBAND_CABLE
    Biometric Authentication Service (DpHost)LDpHost.exeRelated to DigitalPersona, Inc.
    BitDefender Communicator (XCOMM)Lxcommsvr.exeRelated to bitdefender Antivirus
    BitDefender Desktop Update Service (LIVESRV)Llivesrv.exeUpdate service for BitDefender_Antivirus
    BitDefender Scan Server (bdss)Lbdss.exeRelated to Bitdefender antivirus
    BitDefender Virus Shield (VSSERV)Lvsserv.exeRelated to bitdefender (Virusshield)
    Black Hole Professional Version (wmupdate)Xsvch0st.exeDetected as Backdoor.Win32.Ciadoor.123.d by Kaspersky
    Black Hole2005 Professional Version (Black Hole2005
    Professional)
    XQQ.exeAdded by the Troj/BlackHol-C TROJAN!
    Black Hole2005 Professional Version (Black Hole2005
    Professional)
    Xserver.exeAdded by the Troj/Singu-W TROJAN! Note: This trojan file is found in the Windows or Winnt folder.

    Engine Version 2.0 by CastleCops

    spacer spacer