CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Creative Labs Licensing (udavaaelyeev)Xwbtqacmhmbv.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Creative Labs Licensing ServiceLCreativeLicensing.exeRelated to Creative Labs Licensing Service. Note: located in C:\Program Files\Common Files\Creative Labs Shared\Service\
    Creative Service for CDROM AccessLCTsvcCDA.exeCreative Service for CDROM Access
    crss32.exeXcrss32.exeAdded by the W32/Tilebot-GT WORM! Note: This worm\trojan is located in C:\%WINDIR%
    Crypkey LicenseLcrypserv.exeCrypKey Software Licensing System from Cobalt Systems
    Cryptainer service (ssoftservice)Lssoftsrv.exeOwner:Cypherix Cypherix Encryption Software
    Cryptic Protected Storage (CryptProtectedService)Xcpstorage.exeAdded by the W32/Tilebot-HO WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Cryptographic Engine (EngSvc)Xcsvc.exeAdded by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Cryptographic Services (CryptSvc)Lsvchost.exe -k NetworkServicePart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Crystal APS (CrystalAPS)LCrystalAPS.exeRelated to Crystal_APS Now owned by Business Objects. Note: Located in C:\Program Files\Seagate Software\Enterprise\x86\
    Crystal Cache Server (CacheServer)Lcacheserver.exe Crystal_Decisions_Cache_Server Now owned by Business Objects
    Crystal Event ServerLEventServer.exeCrystal Decisions Event Server
    Crystal Input File Repository Server
    (CrystalInputFileServer)
    Linputfileserver.exe Crystal_Decisions_File_Repository_Server Now owned by Business Objects.
    Crystal Management ServerLCrystalMS.exeCrystal Decisions Management Server
    Crystal Output File Repository Server
    (CrystalOutputFileServer)
    Loutputfileserver.exe Crystal_Decisions_Output_File_Repository_Server Now owned by Business Objects
    Crystal Program Job ServerLProgramServer.exeCrystal Decisions Job Server
    Crystal Report Application ServerLcrystalras.exeCrystal Decisions Report Application Server
    Crystal Report Job Server (JobServer_Report)LJobServer.exe Crystal_Decisions_Report_Job_Server Now owned by Business Objects
    Crystal Web Component Server (WebCompServer)LWebCompServer.exeRelated to Crystal Decisions Enterprise software. Now owned by Business_Objects Note: Located in C:\Program Files\Seagate Software\WCS\
    CsdDriverXCsdDriver.sys Troj/Goldun-EE
    CSNetManagerXpXisass.exe W32/SillyFDC-AJ Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    CT Device Query service (CTDevice_Srv)LCTDevSrv.exeRelated to CT_Device_Query Service from Creative Technology Ltd. Note: Located in \%Program Files%\Creative\Shared Files\
    CTI Central ManagementXcti.exeLowers IE security settings
    Curtains for Windows System Service (CurtainsSysSvc)LCurtainsSysSvcNt.exeRelated to Authentium, Inc. http://www.authentium.com/
    CVSNT 2.5.01.1927 Dispatch service (cvsnt)Lcvsservice.exeRelated to CVS_on_NT service Machines. From March Hare Software. Note: Located in C:\Program Files\CVSNT\
    CVSNT 2.5.01.1927 locking service (cvslock)Lcvslock.exeRelated to CVS_on_NT service Machines. From March Hare Software. Note: Located in C:\Program Files\CVSNT\
    CWAFAdminControllerLCWAFAdminController.exeCompuware Seversoftware
    CWAFAdminMonitorLCWAFAdminMonitor.exeCompuware Serversoftware
    CWAFEventRouterLcwafservice.exeCompuware Serversoftware
    CWAFNotesServiceLCWAFNotesService.exeCompuware Serversoftware
    CWAFReportSchedulerLCWAFSchedService.exeCompuware Serversoftware
    CWAFRmiRegistryLCWAFRmiRegistry.exeCompuware Serversoftware
    CWShredder ServiceLCWShredder.exeCWShredder tool from Trend Micro.
    CxEvtSvcXCxEvtSvc.exeIdentified as a variant of the TrojanSpy:Win32/Festeal malware Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    CXPT_ServiceLwcservice.exeRelated to Internet_Security Suite from COSMI Corp.
    CyberArmor Run ServiceLcasvc.exeCyberArmor an Enterprise Class Personal Firewall
    CyberhawkLCHService.exeRelated to Cyberhawk from Novatix, Protects against Viruses, Spyware, Identity Theft. Note: Located in C:\Program Files\Novatix\Cyberhawk\
    CyberLink Background Capture Service (CBCS) (CLCapSvc)LCLCapSvc.exeRelated to CyberPower Systems, Inc. - http://www.powercinema.com/english/index.jsp
    CyberLink Media Library ServiceLCLMLServer.exeRelated to CyberPower Systems, Inc. - http://www.powercinema.com/english/index.jsp
    Cyberlink RichVideo Service(CRVS) (RichVideo)LRichVideo.exeCyberLink RichVideo is an advanced technology designed to save precious video editing time.
    CyberLink Task Scheduler (CTS) (CLSched)LCLSched.exeRelated to CyberPower Systems, Inc. - http://www.powercinema.com/english/index.jsp
    CYGWIN cygserver (cygserver)Lcygrunsrv.exeRelated to Cygwin_RedHat powerful tools to assist developers in migrating applications from UNIX®/Linux to the Microsoft® Windows®; platform. Note: located in C:\Apps\cygwin\bin\
    CypressLinkLCypressLinkService.exeRelated to Related to CypressViewer from Siemens. Medical software. Note: Located in C:\Program Files\Acuson\CypressViewer\Bin\Release\
    czaqi (czaq)Xczaqi.sys Troj/QQHelp-Gen Note:Located in C:\Windows\System\Drivers (Win9x/Me), C:\%WINDIR%\System32\Drivers (XP/WinNT/2K) Install numerous files and other services. Read the link
    D-Link IP servellience Launcher (D-Link_ST3402)LLauncher_DL.exeRelated to D-link Software. Note: Located in C:\Program Files\D-Link\IP surveillance\
    D5586E6CXC107BE90.EXE Troj/BDoor-AFB
    DameWare Mini Remote Control (DWMRCS)LDWRCS.EXERelated to DameWare Development
    DameWare NT Utilities 2.6 (DNTUS26)LDNTUS26.EXERelated to Dameware_NT_Utilities program that allows remote access and control of a computer. This is a common program for hackers to install on a computer, so if it is installed, and you did not install it, it should be removed. Note: Located in C:\%WINDIR%\System32 (XP/WinNT/2K)
    dashsvcLDashsvc.exeMotion computer pen interface. :Owner: Motion Computing Inc.
    Data Protector Inet (OmniInet)LOmniInet.exeRelated to Hewlett-Packard OpenView OmniBack II

    Engine Version 2.0 by CastleCops

    spacer spacer