CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.

This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    EUQ_MonitorLEUQMonitor.exeRelated to a Trend Micro product
    Event Log Watch (LogWatch)LLogWatNT.exeComputer Associates
    Event Monitor (evmon)Xspoolcll.exe" -netcvsAdded by the W32.Spybot.IVQ WORM!
    EvtEngLEvtEng.exeRelated to Intel Corporation
    ewido anti-spyware 4.0 guardLguard.exeRelated to ewido_suite Note: located C:\Program Files\ewido anti-spyware 4.0/
    ewido security suite controlLewidoctrl.exeRelated to ewido networks
    ewido security suite guardLewidoguard.exeRelated to ewido networks
    Examinador de equiposLservices.exeSpanish Windows 2000 computers browser
    ExecView Communication Module (ECM) (ECM Service)LECM.exeRelated to VERITAS_ExecView
    Exten. controlador Instrumental de admon. de WindowsLservices.exeSpanish Windows 2000 windows management instrumentation drive extension
    Extend360 Agent (ServiceMgr)LServiceMgr.exeRelated to Fiberlink's Extend360 TM mobile Note: Located in C:\Program Files\Fiberlink\Extend360\
    Extended Windows Security (Microsoft Extended Windows
    Security)    		XelRecvr.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C:\Windows\ (Win9x/Me), C:\%WINDIR%\ (XP/WinNT/2K)
    Extensible Authentication Protocol (EapHost)Leapsvc.dllPart of Windows Vista Note:Located in C:\%WINDIR%\System32
    ExterntelecomXextel.exeAdded by the W32/Sdbot-AAX WORM! Read the link, rootkit type stealth involved.
    Eyeline Service (EyelineService)Leyeline.exeRelated to Eyeline_Service from NCH Swift Sound. Note: Located in \%Program Files%\NCH Software\Eyeline\
    F-PROT Antivirus for Windows system (FPAVServer)LFPAVServer.exeRelated to F-PROT_Antivirus program. Note: Located in \%Program Files%\FRISK Software\F-PROT Antivirus for Windows\
    F-Prot Antivirus Update MonitorLfpavupdm.exeRelated F-Prot Antivirus Update Monitor by FRISK_Software_International
    F-Secure 2006 (BackWeb Plug-in - 4476822)OSERVIC~1.EXERelated to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program Files\F-Secure Internet Security\backweb\4476822\program folder.
    F-Secure Anti-Virus 2005 (BackWeb Plug-in - 4476822)OSERVIC~1.EXERelated to F-Secure_Antivirus Made by F-Secure Corp. This File should be found in the Program Files\F-Secure Internet Security\backweb\4476822\program folder.
    F-Secure Anti-Virus Firewall Daemon (FSDFWD)Lfsdfwd.exeRelated to F-Secure Corporation.
    F-Secure Authentication Agent (FSAA)LFSAA.EXERelated to F-Secure antivirus
    F-Secure Automatic Update (BackWeb Plug-in - 7681197)OSERVIC~1.EXERelated to F-Secure Backweb application. Note: Located in \%Program Files%\F-Secure\BackWeb\7681197\Program\
    F-Secure Automatic Update Agent (FSAUA)Lfsaua.exeRelated to F-Secure Corporation. Note: Located in C:\Program Files\F-Secure\FSAUA\program\
    F-Secure BackWeb (BackWeb Client - 7681197)OSERVIC~1.EXERelated to F-Secure_BackWeb This File should be found in the Program Files\F-Secure Internet Security\backweb\7681197\program\
    F-Secure BackWeb LAN AccessOfsbwlan.exeRelated to F-Secure_BackWeb LAN Access. This File should be found in the Program Files\F-Secure Internet Security\backweb\7681197\program folder.
    F-Secure Gatekeeper Handler StarterLfsgk32st.exeRelated to F-Secure Anti-Virus Prog.
    F-Secure HTTP Server (fshttps)Lfshttps.exeF-Secure Corporation http://www.what-process.com/process-info.aspx?p=fshttps.exe
    F-Secure Management Agent (FSMA)LFSMA32.EXERelated to F-Secure Anti-Virus Prog.
    F-Secure Network Request BrokerLFNRB32.EXERelated to F-Secure_Anti-Virus software. This File should be found in the Program Files\F-Secure\Common\ folder.
    Fabrik Ultimate Backup Backup Service
    (fabrikhomebackup)    		Lfabrikhomebackup.exeRelated to Fabrik_Ultimate_Backup from Fabrik Inc. secure off-site backup. Note: Located in \%Program Files%\Fabrik Ultimate Backup\
    FactoryTalk Diagnostics CE Receiver (RNADiagReceiver)LRNADiagReceiver.exeRelated to Rockwell_Automation Inc. FactoryTalk suite
    FactoryTalk Diagnostics Local Reader
    (RNADiagnosticsService)    		LRNADiagnosticsSrv.exeRelated to Rockwell_Automation Inc. FactoryTalk suite
    fan.eeewl.comXnsvce32.exeAdded by the TROJ_AGENT.IOF TROJAN! Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    Fast Track Installer (FastTrackInstallerService)LGBInst.exeRelated to Fast_Track_USB from M-Audio. Note: Located in C:\Program Files\M-Audio Fast Track\
    Fast User Switching Compatibility
    FastUserSwitchingCompatibilityTermService
    (FastUserSwitchingCompat    		Xacluih.exeDetected as Backdoor.IRC.ZEU by Bitdefender
    FastUserSwitchingCompatibil (Fast User Switching
    Compatibil)    		Xsvchost.exeAdded by the Troj/Keylog-AT TROJAN! Note: This is not the legitimate Windows process svchost.exe (Which is always found in the System32 folder.) This trojan file is found in the Windows or Winnt folder.
    FaxLfxssvc.exePart of Windows Vista Note:Located in C:\%WINDIR%\System32
    FCIXfci.exe Troj/Bckdr-QJH Note:Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (Vista/XP/WinNT/2K)
    Fear Service (FSVC)Xfear32.exeAdded by the W32/Tilebot-T WORM! Note: This worm file is found in the Windows or Winnt folder.
    FedExAPI Service (FDXAPISVC)LAtomSvc.exeRelated to FedEx service. Note: Located in \%Program Files%\FedEx\FedEx Ship Manager API\Atom\
    FFIXsvchost.exe:exm.exeAdded by Trojan.DoS.Win32.Opdos TROJAN! Please note that this infection is an Alternate Data Stream file attached to the legitimate C:\Windows\System32\svchost.exe file. Do not delete the svchost.exe file as Windows will not operate correctly without it.
    Fiberlink Monitor Service (FiberlinkMonitor)Lwmonitor.exe Boingo's Free_Wi-Fi_Software
    Fiberlinkcomm Wireless EngineLBWEngine.exeRelated to Fiberlink's Extend360 TM mobile Note: Located in C:\Program Files\Fiberlink\Extend360\WENGINE2\
    FIFA WORLD CUP 2007Xfifa2007.exeAdded by the W32/Spybot-MQ WORM! Note: This worm\trojan is located in C:\%WINDIR%\System32\dllcache\(XP/WinNT/2K) Steal information from Protected Storage and terminate certain anti-virus and security software
    File and Folder ProtectorLffpsrv.exeRelated to SoftHeap.Com a software shop of Atlantic Coast PLC http://www.softheap.com/
    FileCabinet CS Print Service (FCPrintService)Lcsifcsvc.exeRelated to FileCabinet_CS Print Service Note: Located in C:\%WINDIR%\
    FileCheckerLfilechecker.exeRelated to FileChecker from Javacool software. Watches important system files for changes, modifications, or tampering (by malicious programs).
    FileZilla Server FTP server (FileZilla Server)LFileZilla Server.exeRelated to FileZilla A FTP and SFTP client for Windows from SourceForge.net
    Firebird GuardianLfbguard.exeFirebird Guardian
    Firebird ServerLfbserver.exeFirebird Database Server
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    208ppm 0.129s (0.007s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer