CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    B's Recorder GOLD Library General Service (bgsvcgen)Lbgsvcgen.exeRelated to B_H_A_Corp B' Recording Gold for CD/DVD burning and authoring software.
    Backbone Service (BBDemon)LCATSysDemon.exeRelated to Dassault_Systemes CAD, PLM solutions make it possible to design and develop products by creating digital mockups. Note: Located in \%Program Files%\Dassault Systemes\B16\intel_a\code\bin\
    Background Intelligent Transfer Service (BITS)Lqmgr.dll Part of Windows Vista Note:Located in C:\%WINDIR%\System32
    Background Intelligent Transfer Service mircosoft 32Xsystemza32.exeAdded by a variant of the Backdoor.Sdbot family of worms and IRC backdoor Trojans. Note: located in \%WINDIR%\
    BackOnTrack Callback Service (BOTCbs)Lbcbs_xp.exeRelated to BackOnTrack from System OK. Note: Located in C:\Program Files\SystemOK\BackOnTrack\WinXP\
    Backup Exec 8.x Alert Server (BackupExecAlertServer)LalertServer.exeRelated to Veritas Software backup tool.
    Backup Exec 8.x Notification Server
    (BackupExecNotificationServer)
    Lnsvr.exeRelated to Veritas Software backup tool.
    Backup Exec Agent Browser (BackupExecAgentBrowser)Lbenetns.exeRelated to the Backup Exec application from Veritas http://www.liutilities.com/products/wintaskspro/processlibrary/benetns/
    Backup Exec Device & Media Service
    (BackupExecDeviceMediaService)
    Lpvlsvr.exeRelated to Veritas Backup Exec and offers essential functionality for Backup Exec. http://www.processlibrary.com/directory/files/pvlsvr/index.php
    Backup Exec Job Engine (BackupExecJobEngine)Lbengine.exeBackup service for Veritas Backup Exec. This program is essential in keeping backups up to date and should not be terminated. http://www.processlibrary.com/directory/files/bengine/index.php
    Backup Exec Naming Service (BackupExecNamingService)Lbenser.exeVeritas Software Corporation. This is the Backup Exec naming service which is needed in order to achieve some backups and restores. http://www.processlibrary.com/directory/files/benser/index.php
    Backup Exec Remote Agent for Windows Servers
    (BackupExecAgentAccelerator)
    Lberemote.exeprocess that belongs to Backup Exec from Veritas http://www.liutilities.com/products/wintaskspro/processlibrary/beremote/
    Backup Exec Server (BackupExecRPCService)Lbeserver.exeRelated to Veritas Backup Exec. This program is essential in keeping backups up to date and should not be terminated. http://www.processlibrary.com/directory/files/beserver/index.php
    BackupClientSvcLBackupClientSvc.exeRelated to NovaNet_WEB NovaStor Corp. Online Backup Services.
    Base Filtering Engine (BFE)Lbfe.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Basics ServiceLSyncServicesBasics.exeRelated to Seagate Sync Services. Note: Located in \%Program Files%\Seagate\Basics\Service\
    bbc (cnn) Ximsins.exe Troj/Hupigon-U
    BBM Ticket Service (BBMTicketService)Lticketservice.exeRelated to Business_Manager service From Clearly Business. Note: Located in \%Program Files%\Barclays\Business Manager\bin\
    bbserverXbbserver.exe Troj/Hupigon-PS Note: Located in %windir% Read the link, allows remote access
    BCL easyPDF SDK Loader (bepprldr)Lbepprldr.exeRelated to easyPDF from BCL Technologies. Printer Driver makes it very easy and affordable to convert any document formats (including Word, Excel, and Powerpoint) to PDF. Note: Located in \%Program Files%\Common Files\BCL Technologies\easyPDF 4\
    bcrcogqrkykoXmueyzrua5.exe
    bcveServLbcveserv.exeRelated to BestCrypt from Jetico, Inc. Keeps your confidential data in a strongly encrypted form on your disk and provides you with transparent access. Note: Located in \%Program Files%\BestCrypt\BC_VE\
    BeatJam Music Server - HTTP
    (BeatJamMusicStreamingServer)
    LBeatJamHttpService.exe See_BeatJam BeatJam Music Server Edition.
    BeatJam Music Server - UPnP (BeatJamUPnPMusicServer)LBeatJamUPnPService.exe See_BeatJam Justsystem audio software BeatJam.
    Belkin Wireless USB Network Adapter (Belkin Wireless
    USB Network Adapter Service)
    LWLService.exeRelated to Belkin's Wireless USB. Note: Located in \%Program Files%\Belkin\Belkin Wireless Network Utility\
    Bell & Howell Database Manager (dbmang)LDBMANG.EXERelated to Bell_and_Howell
    Bell & Howell Monitor Service (BHMonitorService)Lmonitor.exeRelated to Bell_and_Howell
    BelMonitor Service (BelMonitorService)LBANTMonitorSvc.exeRelated to Belarc, inc.
    BES Client (BESClient)LBESClient.exeRelated to BESClient by BigFix Inc
    BeTwin Terminal Services (TermService)Lwcsdmxp.exeRelated to BeTwin Terminal Services. Software that allows multiple users to simultaneously and independently share a personal computer. Note: Located in \%WINDIR%\System32\
    Beyond Remote ServerOBRServer.exeBeyond Remote Remote Legitimate, but allows remote access so should be removed if it was not intentionally installed
    BGS_SDServiceLBGS_SDservice.exeRelated BMC Software, Inc. - http://www.bmc.com/
    bh611LNT611SVC.EXERelated to Bell_and_Howell
    BigPond Broadband Cable LoginLbpcService.exeTelstra's BIGPOND_BROADBAND_CABLE
    Biometric Authentication Service (DpHost)LDpHost.exeRelated to DigitalPersona, Inc.
    BitDefender Communicator (XCOMM)Lxcommsvr.exeRelated to bitdefender Antivirus
    BitDefender Desktop Update Service (LIVESRV)Llivesrv.exeUpdate service for BitDefender_Antivirus
    BitDefender Scan Server (bdss)Lbdss.exeRelated to Bitdefender antivirus
    BitDefender Virus Shield (VSSERV)Lvsserv.exeRelated to bitdefender (Virusshield)
    Black Hole Professional Version (wmupdate)Xsvch0st.exeDetected as Backdoor.Win32.Ciadoor.123.d by Kaspersky
    Black Hole2005 Professional Version (Black Hole2005
    Professional)
    XQQ.exeAdded by the Troj/BlackHol-C TROJAN!
    Black Hole2005 Professional Version (Black Hole2005
    Professional)
    Xserver.exeAdded by the Troj/Singu-W TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
    BlackICELblackd.exeBlack Ice firewall
    Block Level Backup Engine Service (wbengine)Lwbengine.exePart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Blue Coat K9 Web Protection (WebFilter)Lk9filter.exeRelated to K9 Web Protection
    Bluesocket IPSec Service (BlueService)LBlueService.exeRelated to Bluesocket WLAN service. Note: Located in C:\Program Files\Bluesocket MS IPSec Config Tool\
    BlueSoleil Hid ServiceLBTNtService.exe BlueSoleil is a Bluetooth device manager for Windows. Made by the IVT_Corporation The file associated with this service is found in the Program Files\IVT Corporation\BlueSoleil folder.
    BlueSoleilCSLBlueSoleilCS.exeRelated to BlueSoleil Service. BlueSoleil allows your Bluetooth radio enabled desktop or notebook computer to wirelessly access a wide variety of Bluetooth enabled digital devices. Note: Located in \%Program Files%\IVT Corporation\BlueSoleil\
    BlueSoleilCS (audieqaac)Xlmgub.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Bluetooth Feature Support (BthFilterHelper)LBthFilterHelper.exeRelated to Bluetooth_Feature_Support by CSR. Note: Located in \%Program Files%\CSR\Vista Profile Pack\
    Bluetooth Notification Service (Btnfserv)Xbtserv.exeAdded by the W32/Sdbot-CSD WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Bluetooth Service (btwdins)Lbtwdins.exeBluetooth Service
    Bluetooth Stack COM ServerXBTStack.exe W32/Sdbot-DGV Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (XP/WinNT/2K) Allows others to access the computer
    boboLmomopanda platinium antivirus
    BOCoreLBOCORE.exeRelated to Comodo Personnal Firewall. Note: Located in \%Program Files%\Comodo\CBOClean\
    Boeing Permissions ElevatorLelevate.exeThe Boeing Company (internal use)
    Boingo Monitor ServiceLwmonitor.exeBoingo's Free_Wi-Fi_Software
    Bonjour ServiceLmDNSResponder.exeCreate's a network of computers and smart devices. Made by Apple Computer, Inc. For more information Click_Here File location is in the Program Files\Gizmo Project folder.
    BoolTern (BoolTern)Xsvch0st.exeAdded by the W32/Tilebot-U WORM! Note: This (svch0st.exe) is not the legitimate Windows process (Which is always found in the System32 folder, also notice the difference in the spelling.) The legitimate Windows process (svchost.exe) should not be seen in Msconfig or as a Startup item. This worm\trojan file is found in the Windows or Winnt folder. Read the link, rootkit type stealth involved.
    Boonty GamesXBoonty.exe Boonty_Games Used with Boonty box. Will not uninstall from Add/Remove programs. This is from their Privacy Policy. "We also may share payment information with third parties who provide payment services and share aggregate data regarding the type and number of videogames you download, your age, gender, occupation, education level, geographic location, computer equipment data and on-line and video game interests, activities and practices to game publishers. In addition, we share e-mail addresses with third party e-mail carriers who assist us in sending out our e-mails to many of our customers at the same time. Subsidiaries and controlled affiliates are not viewed as third parties for the purpose of data transfers, and hence personal information may be shared within those subsidiaries and affiliates without obtaining additional consent."
    Broadcom ASF IP and SMBIOS Mailbox Monitor (ASFIPmon)LAsfIpMon.exeRelated to Broadcom_ASF IP Monitor from Broadcom Corporation. Note: Located in \%Program Files%\Broadcom\ASFIPMon\
    Broadcom ASF IP monitoring service v3.0.1Lbasfipm.exeRelated to Broadcom communications - hardware.
    Broadcom ASF IP monitoring service v6.0.3 (BAsfIpM) Lbasfipm.exeRelated to Broadcom communications - hardware.
    Broadcom ASF IP monitoring service v6.0.4 (BAsfIpM)Lbasfipm.exeRelated to Broadcom communications - hardware.
    Broadcom Wireless LAN Tray Service (wltrysvc)Lwltrysvc.exeRelated to wireless networking for Broadcom wireless network cards
    Brother BidiAgent Service for Resource manager
    (brmfbags)
    LBrmfBAgS.exeRelated to Brother_BidiAgent Service products, from Brother Industries. Note: Located in C:\WINDOWS\System32\
    Brother Popup Suspend service for Resource manager
    (brmfrmps)
    LBrmfrmps.exeBrother printer related
    BrowserXsvchost.exe -k BrowserAdded by the Fuwudoor TROJAN!
    BrSplService (Brother XP spl Service)Lbrsvc01a.exerelated to Brother Industries Ltd
    BsHelpCSLBsHelpCS.exeRelated to BlueSoleil Service. BlueSoleil allows your Bluetooth radio enabled desktop or notebook computer to wirelessly access a wide variety of Bluetooth enabled digital devices. Note: Located in \%Program Files%\IVT Corporation\BlueSoleil\
    BT Auto Backup Service (VaultClientSRV)LVaultClientSRV.exeRelated to BT_Auto_Backup Service. Note: Located in \%Program Files%\BT Auto Backup\
    BT Modem LockLModemLock.exeRelated to NetProtector Parental control.
    BT Modem Lock (ooeidiiybl3on8e)Xssqsz.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    BUFFALO Wireless Configuration Service (bwcsrv)Lbwcsrv.exeRelated to BUFFALO_Wireless Configuration Service Note: Located in C:\WINDOWS\System32\Drivers\
    Buffalo Wireless Service (BWSVC)Lbwsvc.exeRelated to Buffalo_Wireless_Service The Multimedia Combo Set by SANSUN Industries. Note: Located in C:\Program Files\BUFFALO\Client Manager 2\
    BullGuard Email Monitoring (BsMailProxy)Lsvchost.exeRelated to BullGuard Antivirus. Note: located in C:\Program Files\BullGuard Software\
    BullGuard File Monitoring (BsFileSpy)Lsvchost.exeRelated to BullGuard Antivirus. Note: located in C:\Program Files\BullGuard Software\
    BullGuard Firewall (BsFirewall)Lsvchost.exeRelated to BullGuard Antivirus. Note: located in C:\Program Files\BullGuard Software\
    BullGuard LiveUpdate (BGLiveSvc)LBullGuardUpdate.exeRelated to BullGuard Antivirus. Note: located in C:\Program Files\BullGuard Software\
    BullGuard Main (BGMainSvc)Lsvchost.exeRelated to BullGuard Antivirus. Note: located in C:\Program Files\BullGuard Software\
    BusinessC (BusinessContinuity)Xmsstl.exeAdded by the SDBOT.CJR WORM! Read the link, rootkit type stealth involved.
    Bytemobile Web Configurator (bmwebcfg)Lbmwebcfg.exeRelated to Bytemobile Inc. Mobile Content Filtering.

    Engine Version 2.0 by CastleCops

    spacer spacer