CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    BlackICELblackd.exeBlack Ice firewall
    Block Level Backup Engine Service (wbengine)Lwbengine.exePart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Blue Coat K9 Web Protection (WebFilter)Lk9filter.exeRelated to K9 Web Protection
    Bluesocket IPSec Service (BlueService)LBlueService.exeRelated to Bluesocket WLAN service. Note: Located in C:\Program Files\Bluesocket MS IPSec Config Tool\
    BlueSoleil Hid ServiceLBTNtService.exe BlueSoleil is a Bluetooth device manager for Windows. Made by the IVT_Corporation The file associated with this service is found in the Program Files\IVT Corporation\BlueSoleil folder.
    BlueSoleilCSLBlueSoleilCS.exeRelated to BlueSoleil Service. BlueSoleil allows your Bluetooth radio enabled desktop or notebook computer to wirelessly access a wide variety of Bluetooth enabled digital devices. Note: Located in \%Program Files%\IVT Corporation\BlueSoleil\
    BlueSoleilCS (audieqaac)Xlmgub.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Bluetooth Feature Support (BthFilterHelper)LBthFilterHelper.exeRelated to Bluetooth_Feature_Support by CSR. Note: Located in \%Program Files%\CSR\Vista Profile Pack\
    Bluetooth Notification Service (Btnfserv)Xbtserv.exeAdded by the W32/Sdbot-CSD WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Bluetooth Service (btwdins)Lbtwdins.exeBluetooth Service
    Bluetooth Stack COM ServerXBTStack.exe W32/Sdbot-DGV Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (XP/WinNT/2K) Allows others to access the computer
    boboLmomopanda platinium antivirus
    BOCoreLBOCORE.exeRelated to Comodo Personnal Firewall. Note: Located in \%Program Files%\Comodo\CBOClean\
    Boeing Permissions ElevatorLelevate.exeThe Boeing Company (internal use)
    Boingo Monitor ServiceLwmonitor.exeBoingo's Free_Wi-Fi_Software
    Bonjour ServiceLmDNSResponder.exeCreate's a network of computers and smart devices. Made by Apple Computer, Inc. For more information Click_Here File location is in the Program Files\Gizmo Project folder.
    BoolTern (BoolTern)Xsvch0st.exeAdded by the W32/Tilebot-U WORM! Note: This (svch0st.exe) is not the legitimate Windows process (Which is always found in the System32 folder, also notice the difference in the spelling.) The legitimate Windows process (svchost.exe) should not be seen in Msconfig or as a Startup item. This worm\trojan file is found in the Windows or Winnt folder. Read the link, rootkit type stealth involved.
    Boonty GamesXBoonty.exe Boonty_Games Used with Boonty box. Will not uninstall from Add/Remove programs. This is from their Privacy Policy. "We also may share payment information with third parties who provide payment services and share aggregate data regarding the type and number of videogames you download, your age, gender, occupation, education level, geographic location, computer equipment data and on-line and video game interests, activities and practices to game publishers. In addition, we share e-mail addresses with third party e-mail carriers who assist us in sending out our e-mails to many of our customers at the same time. Subsidiaries and controlled affiliates are not viewed as third parties for the purpose of data transfers, and hence personal information may be shared within those subsidiaries and affiliates without obtaining additional consent."
    Broadcom ASF IP and SMBIOS Mailbox Monitor (ASFIPmon)LAsfIpMon.exeRelated to Broadcom_ASF IP Monitor from Broadcom Corporation. Note: Located in \%Program Files%\Broadcom\ASFIPMon\
    Broadcom ASF IP monitoring service v3.0.1Lbasfipm.exeRelated to Broadcom communications - hardware.
    Broadcom ASF IP monitoring service v6.0.3 (BAsfIpM) Lbasfipm.exeRelated to Broadcom communications - hardware.
    Broadcom ASF IP monitoring service v6.0.4 (BAsfIpM)Lbasfipm.exeRelated to Broadcom communications - hardware.
    Broadcom Wireless LAN Tray Service (wltrysvc)Lwltrysvc.exeRelated to wireless networking for Broadcom wireless network cards
    Brother BidiAgent Service for Resource manager
    (brmfbags)
    LBrmfBAgS.exeRelated to Brother_BidiAgent Service products, from Brother Industries. Note: Located in C:\WINDOWS\System32\
    Brother Popup Suspend service for Resource manager
    (brmfrmps)
    LBrmfrmps.exeBrother printer related
    BrowserXsvchost.exe -k BrowserAdded by the Fuwudoor TROJAN!
    BrSplService (Brother XP spl Service)Lbrsvc01a.exerelated to Brother Industries Ltd
    BsHelpCSLBsHelpCS.exeRelated to BlueSoleil Service. BlueSoleil allows your Bluetooth radio enabled desktop or notebook computer to wirelessly access a wide variety of Bluetooth enabled digital devices. Note: Located in \%Program Files%\IVT Corporation\BlueSoleil\
    BT Auto Backup Service (VaultClientSRV)LVaultClientSRV.exeRelated to BT_Auto_Backup Service. Note: Located in \%Program Files%\BT Auto Backup\
    BT Modem LockLModemLock.exeRelated to NetProtector Parental control.
    BT Modem Lock (ooeidiiybl3on8e)Xssqsz.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    BUFFALO Wireless Configuration Service (bwcsrv)Lbwcsrv.exeRelated to BUFFALO_Wireless Configuration Service Note: Located in C:\WINDOWS\System32\Drivers\
    Buffalo Wireless Service (BWSVC)Lbwsvc.exeRelated to Buffalo_Wireless_Service The Multimedia Combo Set by SANSUN Industries. Note: Located in C:\Program Files\BUFFALO\Client Manager 2\
    BullGuard Email Monitoring (BsMailProxy)Lsvchost.exeRelated to BullGuard Antivirus. Note: located in C:\Program Files\BullGuard Software\
    BullGuard File Monitoring (BsFileSpy)Lsvchost.exeRelated to BullGuard Antivirus. Note: located in C:\Program Files\BullGuard Software\
    BullGuard Firewall (BsFirewall)Lsvchost.exeRelated to BullGuard Antivirus. Note: located in C:\Program Files\BullGuard Software\
    BullGuard LiveUpdate (BGLiveSvc)LBullGuardUpdate.exeRelated to BullGuard Antivirus. Note: located in C:\Program Files\BullGuard Software\
    BullGuard Main (BGMainSvc)Lsvchost.exeRelated to BullGuard Antivirus. Note: located in C:\Program Files\BullGuard Software\
    BusinessC (BusinessContinuity)Xmsstl.exeAdded by the SDBOT.CJR WORM! Read the link, rootkit type stealth involved.
    Bytemobile Web Configurator (bmwebcfg)Lbmwebcfg.exeRelated to Bytemobile Inc. Mobile Content Filtering.
    C-DillaCdaC11BAOCDAC11BA.EXEcopy protection software
    C-DillaSrvLCDANTSRV.EXEC-Dilla License Management software from MacroVison
    CA ISafeLisafe.exeRelated to Computer Associates virus software.
    CA License Client (CA_LIC_CLNT)Llic98rmt.exeComputer Associates
    CA License Server (CA_LIC_SRVR)Llic98rmtd.exeComputer associates
    CA Pest Patrol Realtime Protection Service (ITMRTSVC)LITMRTSVC.exeRelated to CA_Pest_Patrol Realtime Protection Service Note: Located in C:\Program Files\CA\PPRT\bin\
    CaCCProvSPLccprovsp.exeRelated to eTrust_Internet_Security_Suite from Computer Associates International Inc. Note: Located in C:\Program Files\CA\eTrust Internet Security Suite\
    CachemanXP (CachemanXPService)LCachemanXP.exeCachemanXP Memory Manager
    CAILILcaili.exerelated to CarryIco Software, installed by a flash card reader driver setup utility.
    CAISafeLISafe.exePart of eTrust EZ Antivirus

    Engine Version 2.0 by CastleCops

    spacer spacer