CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9466.22 of $21422.68
left sidedonated so farneed $11956.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 3876 entries and growing...
Last updated on 2008-05-09 18:10:24 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    F-PROT Antivirus for Windows system (FPAVServer)LFPAVServer.exeRelated to F-PROT_Antivirus program. Note: Located in \%Program Files%\FRISK Software\F-PROT Antivirus for Windows\
    F-Prot Antivirus Update MonitorLfpavupdm.exeRelated F-Prot Antivirus Update Monitor by FRISK_Software_International
    F-Secure 2006 (BackWeb Plug-in - 4476822)OSERVIC~1.EXERelated to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program Files\F-Secure Internet Security\backweb\4476822\program folder.
    F-Secure Anti-Virus 2005 (BackWeb Plug-in - 4476822)OSERVIC~1.EXERelated to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program Files\F-Secure Internet Security\backweb\4476822\program folder.
    F-Secure Anti-Virus Firewall Daemon (FSDFWD)Lfsdfwd.exeRelated to F-Secure Corporation.
    F-Secure Authentication Agent (FSAA)LFSAA.EXERelated to F-Secure antivirus
    F-Secure Automatic Update (BackWeb Client - 7681197)OSERVIC~1.EXERelated to F-Secure, http://www.f-secure.com/ Backweb application. Note: Located in \%Program Files%\F-Secure\BackWeb\7681197\Program\
    F-Secure Automatic Update (BackWeb Plug-in - 7681197)OSERVIC~1.EXERelated to F-Secure Backweb application. Note: Located in \%Program Files%\F-Secure\BackWeb\7681197\Program\
    F-Secure Automatic Update Agent (FSAUA)Lfsaua.exeRelated to F-Secure Corporation. Note: Located in C:\Program Files\F-Secure\FSAUA\program\
    F-Secure BackWeb (BackWeb Client - 7681197)OSERVIC~1.EXERelated to F-Secure_BackWeb This File should be found in the Program Files\F-Secure Internet Security\backweb\7681197\program\
    F-Secure BackWeb LAN AccessOfsbwlan.exeRelated to F-Secure_BackWeb LAN Access. This File should be found in the Program Files\F-Secure Internet Security\backweb\7681197\program folder.
    F-Secure Gatekeeper Handler StarterLfsgk32st.exeRelated to F-Secure Anti-Virus Prog.
    F-Secure HTTP Server (fshttps)Lfshttps.exeF-Secure Corporation http://www.what-process.com/process-info.aspx?p=fshttps.exe
    F-Secure Management Agent (FSMA)LFSMA32.EXERelated to F-Secure Anti-Virus Prog.
    F-Secure Network Request BrokerLFNRB32.EXERelated to F-Secure_Anti-Virus software. This File should be found in the Program Files\F-Secure\Common\ folder.
    FactoryTalk Diagnostics CE Receiver (RNADiagReceiver)LRNADiagReceiver.exeRelated to Rockwell_Automation Inc. FactoryTalk suite
    FactoryTalk Diagnostics Local Reader
    (RNADiagnosticsService)
    LRNADiagnosticsSrv.exeRelated to Rockwell_Automation Inc. FactoryTalk suite
    fan.eeewl.comXnsvce32.exeAdded by the TROJ_AGENT.IOF TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Fast Track Installer (FastTrackInstallerService)LGBInst.exeRelated to Fast_Track_USB from M-Audio. Note: Located in C:\Program Files\M-Audio Fast Track\
    Fast User Switching Compatibility
    FastUserSwitchingCompatibilityTermService
    (FastUserSwitchingCompat
    Xacluih.exeDetected as Backdoor.IRC.ZEU by Bitdefender
    FastUserSwitchingCompatibil (Fast User Switching
    Compatibil)
    Xsvchost.exeAdded by the Troj/Keylog-AT TROJAN! Note: This is not the legitimate Windows process svchost.exe (Which is always found in the System32 folder.) This trojan file is found in the Windows or Winnt folder.
    FaxLfxssvc.exePart of Windows Vista Note:Located in C:\%WINDIR%\System32
    FCIXfci.exe Troj/Bckdr-QJH Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (Vista/XP/WinNT/2K)
    Fear Service (FSVC)Xfear32.exeAdded by the W32/Tilebot-T WORM! Note: This worm file is found in the Windows or Winnt folder.
    FedExAPI Service (FDXAPISVC)LAtomSvc.exeRelated to FedEx service. Note: Located in \%Program Files%\FedEx\FedEx Ship Manager API\Atom\
    FFIXsvchost.exe:exm.exeAdded by Trojan.DoS.Win32.Opdos TROJAN! Please note that this infection is an Alternate Data Stream file attached to the legitimate C:\Windows\System32\svchost.exe file. Do not delete the svchost.exe file as Windows will not operate correctly without it.
    Fiberlink Monitor Service (FiberlinkMonitor)Lwmonitor.exe Boingo's Free_Wi-Fi_Software
    Fiberlinkcomm Wireless EngineLBWEngine.exeRelated to Fiberlink's Extend360 TM mobile Note: Located in C:\Program Files\Fiberlink\Extend360\WENGINE2\
    FIFA WORLD CUP 2007Xfifa2007.exeAdded by the W32/Spybot-MQ WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\dllcache\(XP/WinNT/2K) Steal information from Protected Storage and terminate certain anti-virus and security software
    File and Folder ProtectorLffpsrv.exeRelated to SoftHeap.Com a software shop of Atlantic Coast PLC http://www.softheap.com/
    FileCabinet CS Print Service (FCPrintService)Lcsifcsvc.exeRelated to FileCabinet_CS Print Service Note: Located in C:\%WINDIR%\
    FileCheckerLfilechecker.exeRelated to FileChecker from Javacool software. Watches important system files for changes, modifications, or tampering (by malicious programs).
    FileZilla Server FTP server (FileZilla Server)LFileZilla Server.exeRelated to FileZilla A FTP and SFTP client for Windows from SourceForge.net
    Firebird GuardianLfbguard.exeFirebird Guardian
    Firebird ServerLfbserver.exeFirebird Database Server
    FireDaemon Service: events (events)XFireDaemon.EXEReported by Ewido security suite as Backdoor.SdBot.nj. Note: FireDaemon is a legitimate product that has been included, illegally, as part of the payload in a series of Worms and Trojans that exploit various security holes in Microsoft's Operating System products. For More information including cleanup Click_Here
    FireDaemon Service: rundll (rundll)XFireDaemon.EXEReported by Ewido security suite as Backdoor.SdBot.nj. Note: FireDaemon is a legitimate product that has been included, illegally, as part of the payload in a series of Worms and Trojans that exploit various security holes in Microsoft's Operating System products. For More information including cleanup Click_Here
    firefox auto updateXfirefox.exeAdded by the W32/Tilebot-DN WORM!, Note: Located in C:\%WINDIR%\
    FireGL23UtilLf23hser.exeRelated to ATI_Fire_GL3 Video Accelerator from FGL Graphics now owned by ATI. Note: located in \%WINDIR%\System32\
    Firewall service (FWSvc)XFWSvc.exeRelated to WinAntiVirus Pro - rogue "antivirus"
    Fix-It Task Manager (mxserver)Lmxserver.exeRelated to Ontrack Inc. Data Recovery service.
    FJTWMKSVLFJTWMKSV.exeRelated to PFU's driver broad line-up of Fujitsu brand "fi-Series" document scanners. Note: located in \%WINDIR%\twain_32\fjscan32\
    Flash Communication Admin Service (FlashComAdmin)LFlashComAdmin.exeAppears to be modem driver related, Made by Macromedia, Inc.
    Flash Communication Server (FlashCom)LFlashCom.exeAppears to be modem driver related, Made by Macromedia, Inc.
    FLEXlm server for PTCLlmgrd.exelmgrd.exe is a process associated with the Macrovision application-generic license server.
    FLEXnet Licensing ServiceLFNPLicensingService.exeRelated to FLEXnet_Publisher from Macrovision. Note: Located in C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\
    Folder Size (FolderSize)LFolderSizeSvc.exeRelated to Folder_Size Adds an other column to your folder view. Note: Located in C:\Program Files\FolderSize\
    Folding@Home
    (FAH@C:+FAH+fah-service+FAH502-Console.exe)
    LFAH502-Console.exeRelated to Stanford University - Folding@home is a distributed client computing effort by Stanford University http://tech-report.com/etc/folding/
    Font Cache DownlevelLFontCacheService.exeService installed by the Microsoft Avalon open beta.
    ForceField IswSvc (IswSvc)LIswSvc.exeRelated to ZoneAlarm_ForceField service from Check Point Software Technologies. Note: Located in \%Program Files%\CheckPoint\ZAForceField\
    ForceWare Intelligent Application Manager (IAM)LnSvcAppFlt.exeRelated to Nvidia Corp. Intelligent Application Manager.
    ForceWare IP service (nSvcIp)LnSvcIp.exeRelated to Nvidia Corp. Network Access Manager.
    ForceWare user log service (nSvcLog)LnSvcLog.exeRelated to Nvidia Corp. Network Access Manager.
    Forceware Web Interface (ForcewareWebInterface)Lapache.exeApache Web Server Software
    Fore! Internet (4Internet)L4Internet.exeRelated to Fore!_ Reservations Technology, LLC Golf Reservations Software. Note: Located in \%Program Files%\Fore! Reservations\
    Fore! Reservations PMS Remoting Server (4MCServe)L4MCServ.exeRelated to Fore!_ Reservations Technology, LLC Golf Reservations Software. Note: Located in \%Program Files%\Fore! Reservations\
    FormScape ServerLfsserver.exeRelated to FormScape Server from Litco Systems. Note: Located in \%Program Files%\FormScapeSoftware\FormScape\bin\exe\
    FormScape Storage ServicesLfsserver.exeRelated to FormScape Storeage Services from Litco Systems. Note: Located in \%Program Files%\FormScapeSoftware\FormScape\bin\exe\
    FormScape Web Server (FormScapeWebServer)LApache.exeApache Web Server Software. Note: Located in \%Program Files%\FormScapeSoftware\FormScape\Apache2\bin\
    Fortech Proxy+LProxyPlus.exeFORTECH Ltd. http://www.proxyplus.cz/
    Fortinet Service Scheduler (FA_Scheduler)Lscheduler.exeRelated to Fortinet security systems are the new generation of real time network protection systems. Note: located in C:\Program Files\Fortinet\FortiClient\
    FortiSslvpnDaemonLFortiSslvpnDaemon.exeRelated to SSL_vpn software from Fortinet inc. Note: Located in \%WINDIR%\System32\
    FrameworkOsrvany1234.exeUnknown owner: Location C:\WINDOWS\system32\srvany1234.exe
    France Telecom Routing Table Service (FTRTSVC)LFTRTSVC.exeRelated to France Telecom A French ISP. Note: Located in C:\WINDOWS\System32\
    Freeloader Monthly Subscription ServiceLFreeloader Monthly Subscription Service File.exeRelated to freeloader.com Online game services.
    FreePOPsLfreepopsservice.exeFreePOPs is distributed by the GNU General Public License is intended to guarantee your freedom to share and change free software. Make sure your copy is not adware or includes a virus. Note: Located in C:\Program Files\FreePOPs\
    FreeSSHDServiceLFreeSSHDService.exeRelated to OpenSSH A free SSH/SecSH protocol suite providing encryption for network services like remote login or remote file transfer. Note: located in C:\Program Files\freeSSHd\
    FreezeScreenSaverXFreezeScreenSaver.exe FREEZESCREENSAVER.EXE_is_Adware Note: Located in C:\WINDOWS\system32\
    frepdll.exeXFREPDLL.EXEAdded by the W32/Tilebot-D WORM! Note: Gives the fake description "ET dll Locator tool". Read the link, rootkit type stealth involved.
    FS Service ControlLNTServApp.exeRelated to ArchestrA Software architecture for the integration of your automation systems.
    fsbwsysOfsbwsys.exeRelated to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program Files\F-Secure Internet Security\backweb\4476822\program folder.
    FSGKHS (F-Secure Gatekeeper Handler Starter)Lfsgk32st.exeRelated to F-Secure Anti-Virus Prog.
    FSMALFSMA32.EXERelated to F-Secure Anti-Virus Prog.
    Fujitsu Services VPN Manager (FS_VPNmanager) ?FSVPNManager.exeAppears to be software from Fujitsu
    Fujitsu Siemens Computers Diagnostic Testhandler
    (TestHandler)
    LTestHandler.exeRelated to Fujitsu Siemens products
    Function Discovery Provider Host (fdPHost)LfdPHost.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    Function Discovery Resource Publication (FDResPub)Lfdrespub.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    FUS_Server (USEPigeonServer)XFTPServer.exeAdded by the Troj/Hunpigon-RO TROJAN! Note: This trojan file is found in %windir%
    FW Configuration InterpreterLUmxCfg.exeTiny Firewall
    FW Event ManagerLUmxAgent.exeTiny Firewall
    FW Live UpdateLumxlu.exeTiny Firewall
    FW User to IP Address TranslationLumxuta.exeTiny Firewall
    FW User-Mode Helper (UmxFwHlp)LUmxFwHlp.exeTiny Software Firewall User-Mode Helper. Made by Tiny Software, Inc. A subsidiary of Computer_Associates_International The file associated with this service is located in the Program Files\Tiny Firewall folder.
    fwdrv.sysXfwdrv.sys Troj/Mailbot-CG Note:Located in %root%
    fwnet64 (fwnet)Xfwnet64.exeAdded by Backdoor.SDBot.gen Note: This worm\trojan is located in C:\%WINDIR%\
    FwSRServiceLfwsrservice.exeCheckPoint SecuRemote

    Engine Version 2.0 by CastleCops

    spacer spacer