CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.

This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Diagnostic System Host (WdiSystemHost)Lwdi.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    DiamondCS Process Guard Service v3.000Ldcsuserprot.exeprocess guard
    DigiCtrlLdigisc.exeRelated to Matrox_Electronic_Systems DigiSuite Service Control
    DigiCtrl (eseonijpbeuoa)Xztk.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Digidesign MME Refresh Service (DigiRefresh)LMMERefresh.exeRelated to Digidesgin Protocols Refreshes your midi ports on the 002(R) (the 002R is a hardware audio/midi converter connected to your computer via firewire). Must be running in order to use the MIDI functionality of the Digi002R
    digiSPTIServiceLdigiSPTIService.exeRelated to Pro_Tools digital audio workstation (DAW) technology.
    Digital Pen rendezvous server (PenRendezvous)LLPhal.exeRelated to Logitech_o2 software from Logitech. Note: Located in \%Program Files%\Common Files\Logitech\Pen\Phal\Service\
    Digital Pen Socket to USB protocol (PenSup)LLPhal.exeRelated to Logitech_o2 software from Logitech. Note: Located in \%Program Files%\Logitech\Pen\Phal\Service\
    Digitizer Service (Digitizer)Ldigtizer.exeRelated to Digitizer_Service from Wacom Tech. Note: Located in C:\%WINDIR%\System32 (XP/WinNT/2K)
    Dimension4LD4.exeRelated to Dimension4 Thinking Man Software - Note: Located in C:\Program Files\D4\
    direct sound rss (dsrss)Xdsrss.exeAdded by the Backdoor.SdBot.xd as identified by ewido. Note: This worm\trojan is located in C:\%WINDIR%\
    DirectUpdate engineLDUService.exeDirect Update - registers dynamic IPs to a fixed hostname
    DirectX Debug Service (DXDebug)LDXDebugService.exeRelated to the Microsoft DirectX SDK and offers a debug facility for this development suite.
    DirectX DriversXD1rectX.exeAdded by the SDBOT.CIF WORM! This should not be confused with Microsoft DirectX files. Read the link, rootkit type stealth involved.
    DirectX Graphics (dxdmain)Xdxdmain.exeAdded by the W32/Codbot-O WORM!
    DirectX Service (Cakad)Xexplorer.exe Troj/DwnLdr-GTD Read the link, allows remote access
    DirectX Service (DirectFezt)Xexplorer.exe Troj/Crybot-G Note: Located in the downloaded program files folder Read the link, allows remote access
    DirectX Service (DirectService)Xdirectx.exeAdded by the Troj/Crybot-B TROJAN! This should not be confused with Microsoft DirectX files. Note: Allows a remote intruder to gain access and control over the computer through IRC channels.
    DirectX Service (DirectValk)Xexplorer.exeAdded by the Troj/Crybot-F TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    DirectX Service (DirectXopm)Xexplorer.exeAdded by an unknown variant of a backdoor TROJAN! Note: This worm\trojan is located in C:\%WINDIR%\COMMAND\ Folder. Note This should not be confused with C:\%WINDIR%\explorer.exe which is the Microsoft Operating file.
    directx.exeXdirectx.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder. Note: This is not the legitimate Windows Process. (Which is found in the System32 folder.) This worm\trojan file is found in the Windows or Winnt folder.
    DIRECWAY Webcast (DPC_SRV_WEBCAST)Ldpcproxy.exeRelated to DIRECWAY Webcast - http://www.directway.com/
    DirMS_DefragmentationLDirmsService.exeRelated to DirMS_Defragmentation from DIRMS. Allows the user to defragment hard drives with a user-friendly GUI. Note: Located in C:\Program Files\MATCO\
    DiRT Drivers Auto Removal (pr2ah4nb) (pr2ah4nb)Lpr2ah4nb.exeRelated to DiRT_Drivers Auto Removal from Protection Technology. Ultimate solution for licensed software developers and publishers. Note: Located in \%WINDIR%\System32\
    DiRT Drivers Auto Removal (pr2ah4nc) (pr2ah4nc)Lpr2ah4nc.exeRelated to DiRT_Drivers Auto Removal from Protection Technology. Ultimate solution for licensed software developers and publishers. Note: Located in \%WINDIR%\System32\
    Disk Checker Service (Check Disk)Xchkdsk.exeAdded by the W32/Tilebot-IS WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder. Read the link
    Disk Indexing Service (DiSVC)Xdisvc.exeAdded by the Troj/IRCBot-UX TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Disk Management Service (VxSvc)LVxSvc.exeRelated to Dell Open Management system. http://www.what-process.com/process-info.aspx?p=VxSvc.exe
    Disk Monitor Services (DiskMon32)Xsvchost.exe -k dmonAdded by the Hanmon TROJAN! Note: This trojan file is found in the System32 folder.
    Disk Volume Shadow Copy (dvssf)Xdvssvc.exeAdded by a variant of the Backdoor.Win32.SdBot.aad family of worms and IRC backdoor Trojans. Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    DiskeeperLDkService.exeExecutive Software's Diskeeper (Defragmenter)
    Distributed Allocated Memory UnitXmravsc32.exe W32/Rbot-GUA Note:Located in C:\Windows\System\dllcache (Win9x/Me), C:\%WINDIR%\System32\dllcache (XP/WinNT/2K) Please read link. Allows remote access. Turns off AV.
    Distributed Link TrackingXntlsrv.exeAdded by a variant of the W32/SDBOT WORM! Note: Located in \%WINDIR%\
    Distributed Link Tracking Client (TrkWks)Lsvchost.exe -k LocalSystemNetworkRestrictedPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Distributed Link Tracking ExtensionsXkernel32dll.exeAdded by the W32/Myfip-I worm.
    Distributed Link Tracking Service (TrkWksvc)XTrkWksvc.exeAdded by the W32.Toxbot.B WORM!
    Distributed Transaction Coordinator (MSDTC)Lmsdtc.exeRelated to the Distributed_Transaction_Coordinator on Windows 2003. Note: Located in C:\%WINDIR%\System32\
    Distributed Transaction Coordinator (TrkWks)Ltrkwks.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Distributed Transaction Server (MSDCT)Xmsdtc.exe Troj/Hupigo-SJ Read the link, allows remote access
    distributed.net clientXiosdt.exeYou have a Trojan virus on your PC . IOSDT.EXE is its main file. You most probably tried to download illegal copies of Microsoft software, and got infected by this trojan virus as a result (it gives access to your PC from the Internet).
    distributed.net client (dnetc)Ldnetc.exeClient part of the dstributed.net general-purpose distributed computing project.
    DivX video codec libraryXDivXsm.exe W32/Sdbot-DHC Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (Vista/XP/WinNT/2K)
    DK2 Network Server (DNServer32)LDNSrv32.exeRelated to DESkey_Hardware reliable and flexible means to protect your software from piracy. Note: Located in C:\Program Files\DESkey\DK2 Network Server\
    dkab_deviceLDKabcoms.exeRelated to dkab_device Support "bidirectional" printer applet on the Control Panel. Note: Located in \%WINDIR%\System32\
    DkeySyncLsyncservice.exeRelated to GE_Security_Supra Note: Located in c:\program files\ge security supra\
    dlbc_deviceLdlbccoms.exeRelated to Dell computers
    dlbt_deviceLdlbtcoms.exeSomething by Dell Computers
    dlbu_deviceLdlbucoms.exeRelated to Dell computers
    dlbx_deviceLdlbxcoms.exeRelated to Dell computers.
    dlcc_deviceLdlcccoms.exeDell printer related. File is found in the System32 folder.
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    168ppm 0.225s (0.01s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer