CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Multi-user Cleanup ServiceLntmulti.exeRelated to IBM Lotus Note software.
    MWAgentLMWASER.EXERelated to MicroWorld Technologies Inc. - Antivirus & Content Security suite. Note: Located in C:\Program Files\Common Files\MicroWorld\Agent\
    MWSarcpktLMWSEtherpkt.exeRelated to Gateway Ticketing Systems, Inc. http://www.gatewayticketing.com/
    MWSejcapLMWSejcap.exeRelated to Gateway Ticketing Systems, Inc. http://www.gatewayticketing.com/
    MWSpollserverLPollServer.exeRelated to Gateway Ticketing Systems, Inc. http://www.gatewayticketing.com/
    MWSschedLsutmsced.exeRelated to Gateway Ticketing Systems, Inc. http://www.gatewayticketing.com/
    MWSTickLMWSTick.exeRelated to Gateway Ticketing Systems, Inc. http://www.gatewayticketing.com/
    MXS(mxs) (MXS)Xmxs.exeAdded by the W32/Sdbot-CTT WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    My Firewall PlusLSmc.exeRelated to Webroot Firewall
    My Web Search Service (MyWebSearchService)Xmwssvc.exeRelated to MyWebSearch Toolbar&threatid=14137 Toolbar. Note: Located in \%Program Files%\\MYWEBS~1\bar\1.bin\
    MyDesktopService (MyDesktopWindows)LMyDesktopService.exeRelated to Oracle_MyDesktop Service. Note: Located in \%WINDIR%\orclobi\MyDesktop\
    MyMedia ServerLMyMediaServer.exeRelated to FUJITSU LIMITED
    MyRunOnce-CleanupOsrvany.exeMicrosoft Windows application which allows an executable to be run as a service. If you have installed this service, fine, otherwise investigage. Can be used to load Malware.
    MySqlLmysqld-nt.exebelongs to MySQL Daemon. It is a service that handles the access to MySQL databases
    MySqlInventimeLmysqld-max-nt.exeRelated to MySQL database a popular open source database.
    MySrvShell Service (MySrvShell)X(Path to Trojan EXE)Added by the Troj/WinterLv-C Trojan!
    NAI ePolicy Orchestrator Agent (NAIMAGENT32)Lnaimas32.exeRelated to Network Associates anti-virus protection suite http://www.liutilities.com/products/wintaskspro/processlibrary/naimas32/
    NakidoLnakido.exeRelated to Nakido file sharing software. Note: Located in \%Program Files%\Nakido\
    naPrdMgrXnaPrdMgr.exeAdded by the W32/Tilebot-KX WORM! Note: located in \%WINDIR%\ Note: Use SDFix under supervision.
    National Instruments Domain Service (NIDomainService)Lnidmsrv.exeRelated to National_Instruments Domain Service. From National Instruments Corp, Note: Located in \%Program Files%\National Instruments\Shared\Security\
    National Instruments PSP Server Locator (lkClassAds)Llkads.exeRelated to National_Instruments Logos. Note: Located in C:\WINDOWS\system32\
    National Instruments Time Synchronization (lkTimeSync)Llktsrv.exeRelated to National_Instruments Logos. Note: Located in C:\WINDOWS\system32\
    National Instruments Variable Engine (NITaggerService)Ltagsrv.exeRelated to National_Instruments Inc. Note: Located in \%Program Files%\National Instruments\Shared\
    NAV AlertLalertsvc.exeRelated to Symemtecn/Norton products
    Navegador de red (ExpIorer)XExpIorer.exeAdded by the Troj/Taladra-E TROJAN!
    Naver Anti-virus Realtime Monitor (Nsavsvc)LNsavsvc.exeRelated to Naver_Anti-virus Realtime Monitor From NHNCorp. Note: Located in \%Program Files%\\Naver\NaverPCGreen\
    Naver Anti-virus Scan Service (nsvmon)Lnsvmon.exeRelated to Naver_Anti-virus Realtime Monitor From NHNCorp. Note: Located in \%Program Files%\\Naver\NaverPCGreen\
    NBServiceLNBService.exeRelated to Nero Backup service. Note: Located in C:\Program Files\Nero\Nero 7\Nero BackItUp\
    NDAS Service (ndassvc)Lndassvc.exeRelated to XIMETA Inc. Smart Network Storage Solution.
    NDIS Adapter (NDIS TCP Layer Transport Device)Xndis.exeAdded by the W32/Forbot-AX WORM! Note: This worm file is found in the System32 folder.
    NdisFilterXndisfilter.sys Troj/NetAtk-F
    ndservndserv.exeRelated to NetDeploy_Launcher from Open Software Associates Ldt. a division of Managesoft.com Note: Located in C:\Program Files\netDeploy\Launcher\
    Neokernel Web Server (nkservice)Lnkservice.exeRelated to Neokernel_Web_Server a lightweight and secure ASP.NET web application server. Note: Located in \%Program Files%\cometway\neokernel\
    Neoteris Setup ServiceLNeoterisSetupService.exeRelated to Neoteris_Setup_Service now owned by Juniper.net. Note: Located in \%Program Files%\Neoteris\Installer Service\
    Nero Registry InCD Service (NeroRegInCDSrv)LNBHRegInCDSrv.exeRelated to Nero suite lets you organize your multimedia projects easily, helping you get the most from your digital content! Note: Located in \%Program Files%\Nero\Nero8\InCD\
    neruo.exe (NeroFilterCheck)XExplore.exeAdded by the SDBOT.DIH WORM! Read the link, rootkit type stealth involved.
    Net AgentXdls0523pmw.exeAdded by the Trojan.Downloader-Gen/BasicMath.Process TROJAN Note: This trojan is located in C:\%WINDIR%\
    Net Boot Service Xbig5_gb2312.exeDetected as W32.Agobot-TU Note: Located in WINDOWS\system32
    Net Functions Library (Netlib)XNetlib.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C: folder.
    Net Functions Monitoring (Netmon)XNetmon.exeAdded by the W32/Codbot-R WORM!
    Net Logon (Netlogon)Llsass.exeRelated to the Net_Logon service. Uused to authenticate a user into a domain. Note: Located in C:\%WINDIR%\System32\
    Net message ServiceXnetmsg.exeAdded by an unidentified TROJAN! Note: of the Win32/Rbot Family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Net Modulation (kilomang)Xnetmodulr.exeIdentified as Trojan.DownLoader.36024 Note: Located in \%WINDIR%\System32\
    Net Service MonitorXnetsvc.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: Located in C:\WINDOWS\ Note] Netsvc.exe: This tool provides a way to remotely start, stop, and query the status of services from the command line. But is not run as a SERVICE. Here
    NetBackup Client Service (NetBackup INET Daemon)Lbpinetd.exeRelated to VERITAS NetBackup Enterprise Server.
    NetBackup Volume ManagerLbevmd.exeRelated to VERITAS NetBackup Enterprise Server.
    NetBIOS HelperXnbthlp.exeAdded by the W32.Toxbot.AL WORM! Note: Symantec has developed a removal tool to clean the infections of W32.Toxbot.AL, to download it Click_Here
    netbios helper serviceXaltsvc.exeadserver adtech.de redirects
    NetBIOS Helper Service (NetBIOS Helper)Xnbthlp.exeAdded by the W32/Codbot-AE WORM! Note: This worm\trojan file is found in the System32 folder.
    NetBTD(ntbtd) (NetBTD)Xnetbtd.exeAdded by W32/Sdbot-BLW WORM! Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)

    Engine Version 2.0 by CastleCops

    spacer spacer