CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    Power Adapter (ADIDown)Xsvchost.exe Troj/Maran-AW Note:Located in C:\Windows (Win9x/Me), C:\%WINDIR% (XP/WinNT/2K)
    Power Manager (PowerManager)Xsvchost.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    PowerAlert UPS EngineLpaserver.exeRelated to IBM Power Management utililty.
    PowerPanel Personal Edition Service (ppped)Lppped.exeRelated to CyberPower dependable line of uninterruptible power supplies. Note: Located in C:\Program Files\CyberPower PowerPanel Personal Edition\
    PowerUtility Remote Power Management Service (putlrsrv)LPUTLRSRV.exeRelated to Power_Utility Remote Power Management Service. From FUJITSU LIMITED. Note: Located in \%Program Files%\Fujitsu\PowerUtility\remote\
    PowerUtility Schedule (PUSCSRVC)LPUSCSRVC.exeRelated to Power_Utility service. Schedule from FUJITSU LIMITED. Note: Located in \%Program Files%\Fujitsu\PowerUtility\schedule\
    PowerUtility TV Recording Reservation (PUSCSRVC)LPUSCSRVCBas.exeRelated to FUJITSU LIMITED
    PPCtlPrivLPPCtlPriv.exeRelated to CA_Anti-Spyware Note: Located in \%Program Files%\CA\CA Internet Security Suite\CA Anti-Spyware\
    PPPoE ServiceLpppoeservice.exeRelated to the Internet Provider High Speed Services (ISP)
    prairieFyre Application Updater ServiceLUpdaterService.exeRelated to Application_ Updater Service from prairieFyre Software Inc, Note: Located in C:\Program Files\prairieFyre Software Inc\6100CCS\6110\Application Updater Service\
    PreEmpt (qfcoresvc)Lloadsvc.exeRelated to preEmpt Active System Hardening. Made by PivX Solutions, Inc. This file should be found in the Program Files\PivX\PreEmpt folder.
    Prevx Agent (PREVXAgent)LPXAgent.exeRelated to Prevx Ltd. Antivirus and software protection.
    Prime95 ServiceLPRIME95.EXEHelp Universities to find Prime_Numbers The user should decide it's participation.
    Print Client Share (PrntCSh)Xpsmcsh.exeListed as w32 IRC-Bot gen by PrevX here
    Print Job Accounting (OkiJaSvc)Loklogsvc.exeRelated to Print_Job_Accounting software from Oki Data Americas, Inc. Printer service. Note: Located in \%Program Files%\Okidata\Print Job Accounting\
    Print Job Accounting Watch Service (OkiWchSvc)Lokwchsvc.exeRelated to Print_Job_Accounting software from Oki Data Americas, Inc. Printer Watch service. Note: Located in \%Program Files%\Okidata\Print Job Accounting\
    Print Scheduler (prtsch)Xusnsvc.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This rojan is located in \%WINDIR%\System\
    Print Spool Handler (Print Spooler)Xspooler.exeAdded by the W32/Codbot-X WORM! Note: This worm file is found in the System32 folder.
    Print Spooler (Spooler)Lspoolsv.exeUsed for Fax and Printing. Unknown owner :Location: C:\WINDOWS\system32\spoolsv.exe
    Print Spooler Manager (prntspman)Xspoolsvr.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Print Spooler ServiceX(random file).exe Troj/Agent-FXX Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Allows others to access the computer. Steals information
    Print Spooler Service (SpoolSvc201)Xsklrr7yvxzac.exeAdded by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx
    Print Spooler Service (SpoolSvc203)Xcjnr4r4ngyrk.exeAdded by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx
    Print Spooler Service (SpoolSvc204)Xnlkfev7exne.exeAdded by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx
    Print Spooler Service (SpoolSvc205)Xmlsdf8h8183934.exeAdded by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx
    Print Spooler Service (SpoolSvc206)Xmlsdf8hiloswaejo.exeAdded by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx
    Print Spooler Service (SpoolSvc207)Xsklrr7y7497903.exeAdded by the HackerDefender SDBot TROJAN! ROOTKIT INFECTION Note: This worm\trojan is located in Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Also found in C:\WINDOWS\TEMP\ folder. The filename is random. The service name is known to be from SpoolSvc201 to SpoolSvc2xx
    Print Spooler Service (uuiy84eiye0iuo)Xrsbmsc.exeListed as Win32.Malware.gen by Prevx here
    Print2EmailXpdf.exeAdded by a variant of the Backdoor.Sdbot Note: Located in \%WINDIR%\ Note: Use SDFix under supervision.
    Printer Spooler (printspool)Xspooler32.exeAdded by the W32/Sharp-L WORM! Note: This worm\trojan file is found in the Windows or Winnt folder.
    Printer Spooler Service (Random Name)Xrandom filename Troj/Ccdip-B
    PRISMSVCLPRISMSVC.EXERelated to PRISM_Wireless_LAN Service from Conexant Systems, Inc. Note: Located in \%WINDIR%\System32\
    PrismXLLPRISMXL.SYSThe PrismXL service lets the Client deploy Tasks on a target computer regardless of the current user.s permissions.
    PrivacyView Service (PVService)LPVService.exeRelated to Privacy_View software, encrypts files, folders and Internet files. File is normally located in the Program Files\File System Information\SystemFolder folder.
    Private Folder Service (prfldsvc)LPrfldSvc.exePrivate Folder 1.0 was released by Microsoft on the 6th July but Microsoft officially withdrew its support of Private Folder and removed it from their website 10 days later due to negative feedback. More The program can still be downloade from third party sites. Note: Located in C:\Program Files\Microsoft Private Folder 1.0\
    Privilege Win32 ServerLPLServ.exeRelated to Aladdin Knowledge Systems. Located in the Windows or Winnt\System32 folder.
    Procedure Distribution ServiceXprsvr.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Process Activity Monitor (paamsrv)Lpaamsrv.exeActivity Monitor belonging to the Privacy Expert Suite Software from Acronis.
    Process Manager Lprocess_manager_nt.exeSoftware application for mining and related extractive industries and produces two ranges of products under the Datamine and Earthworks labels. Note: Located in C:\Program Files\Common Files\Earthworks
    Process Monitor (LVPrcSrv)LLVPrcSrv.exeRelated to Logitech QuickCam Provides additional configuration options for these devices. Note: Located in \%Program Files%\common files\logishrd\lvmvfm\LVPrcSrv.exe
    Process Task ManagerXsvhost.exeAdded by a variant of the W32/SDBOT WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\ (XP/WinNT/2K)
    ProcessEnumerator32 (pe32)Xfi49.exeAdded by the W32/Sdbot-ACN WORM! Read the link, rootkit type stealth involved.
    ProductivIT Service (ProductivITService)LTEKS_Service.exeRelated to DynTeck Inc.
    Proficy HMI/SCADA iFIX server (FIX)Lfixsrv.exeRelated to Related to GE_Fanuc_Automation enable you to act in real-time to optimize productivity and increase profitability. Note: located in C:\Program Files\GE Fanuc\Proficy iFIX\
    Proficy Licensing (CCFLIC0)LCCFLIC0.exeRelated to GE_Fanuc_Automation enable you to act in real-time to optimize productivity and increase profitability. Note: located in C:\Program Files\GE Fanuc\Proficy Common\Proficy Common Licensing\
    Program Learning Management System (PLMS)Xplms.exeAdded by a variant of the Backdoor.Sdbot Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision.
    Programador de LiveUpdate automáticoLALUSchedulerSvc.exeRelated to to the Symantec LiveUpdate service which updates your Symantec products periodically.
    Programador de tareasLMSTask.exeSpanish Windows 2000 task scheduler
    ProgramCheckerPro (sassvc)Lsassvc.exeRelated to ProgramChecker Tool to analyze, validate, authenticate and research the programs that run on their PCs.
    Prolific HotFix Q0306270LHotFixQ0306270.exeHotFix Q0306270 Prolific Technology Inc. USB Flash Disk

    Engine Version 2.0 by CastleCops

    spacer spacer