CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.

This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

    •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    O&O CleverCache Agent (OOCleverCacheAgent)Looccag.exeRelated to O&O_Software Products. Located in folder: \OO Software\CleverCache\
    O&O ComponentInstaller AgentLoocinst.exeRelated to O&O software Protection Software
    O&O DefragLoodag.exewww.oo-software.com
    O&O Defrag 2000 (OOD2000)LOOD2000.exePart of O&O Defrag
    O23 - Service: AOL Anti-Spyware Service
    (AOL_SpywareServ)    		Xaolspy.exeAdded by a variant of the Backdoor.Win32.Rbot.cgu TROJAN! Note: This worm\trojan is located in C:\WINDOWS\web\
    O23 - Service: OradevReports [localrepserver]
    (OracleReportServer-localrepserver)    		Lrwserver.exeRelated to Oracle products
    O2Micro Flash Memory (O2Flash)Lo2flash.exeRelated to O2Micro_Flash Memory Card. Note: Located in C:\WINDOWS\system32\
    Odyssey Client for Fujitsu Siemens Computers
    (odClientService)    		LodClientService.exeRelated to Odyssey_Client for Fujitsu Siemens Computers. Note: Located in C:\Program\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\
    OESH (Office Source Engine Help)XProgram.exeAdded by an unidentified TROJAN! of the Sdbot family. Note: This worm\trojan is located in C: folder.
    Office Server Extensions Notification Service
    (OWSTimer)    		LOWSTIMER.EXERelated to Microsoft_SharePoint Note: Located in C:\Program Files\icrosoft Office\Office\ Files\
    Office Source Engine (ose)LOSE.EXEMicrosoft Office Source Engine
    OfficeScan NT Listener (tmlisten)Ltmlisten.exeRelated to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\
    OfficeScan NT Proxy Service (TmProxy)Ltmproxy.exeRelated to Trend Micro Inc.
    OfficeScanNT Listener (tmlisten)Ltmlisten.exeRelated to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\
    OfficeScanNT Personal Firewall (OfcPfwSvc)LOfcPfwSvc.exeRelated to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\
    OfficeScanNT RealTime Scan (ntrtscan)Lntrtscan.exel Related to Trend_Micro RealTime Scan Antivirus application. Note: Located in \%Program Files%\Trend Micro\OfficeScan Client\
    OlCamSrvLOlCamSrv.exeRelated to: Olympus_America Inc. Imaging services
    OM Common Services (omsad)Lomsad32.exeRelated to Dell Open Management system.
    Omni-NFS ServerLnfsd.exeRelated to Omni-NFS Server from XLink Technology. Note: Located in \%ROOT%\OmniX\
    OmniForm PrinterLofps.exeRelated to Nuance_Communications Inc., (Peviously Scansoft Inc.) A leading supplier of imaging, speech and language solutions
    OmniFormat from Pdf995Lntservice.exeRelated to OmniFormat from Software995 allows dynamic conversion and image manipulation of over 75 file formats. Note: Located in C:\Program Files\omniformat\
    Omniquad MyPrivacyLmpsvc.exeRelated to Omniquad Security's MyPrivacy Internet tracks cleaning tool.
    On Screen Display (TPHKSVC)LTPHKSVC.exeRelated to On_Screen_Display on LENOVO ThinkPad computers. Note: Located in \%Program Files%\LENOVO\HOTKEY\
    ONC/RPC Portmapper (portmapper)LPORTMAP.EXERelated to Bell_and_Howell
    OneStep Search ServiceXonestep.exe OneStepSearch or OneStep_Search
    OneTouch 4.0 MonitorLOtService.exeRelated to OneTouch monitor from Visioneer Inc. OneTouch is an easy-to-use utility that connects the buttons on your Visioneer or Xerox scanner with a powerful set of scanner settings so that with one touch. Note: Located in \%Program Files%\Visioneer\OneTouch 4.0\
    Online Armor (SvcOnlineArmor)Loasrv.exeRelated to Online_Armor from Tall Emu. Personal Firewall. Note: Located in \%Program Files%\Tall Emu\Online Armor\
    Online Backup ServiceLnts.exeRelated to Online_Backup_Service From Acpana Business Systems. Note: Located in C:\Program Files\Acpana Business Systems\Data Deposit Box\
    OpcEnumLOpcEnum.exe OPC_Foundation Sets Industry standards in Interoperability of Automation.
    Open GL DriversXopenGLD.exeAdded by the SDBOT.CLW WORM! Read the link, rootkit type stealth involved.
    OpenAFS Client Service (TransarcAFSDaemon)Lafsd_service.exe OpenAFS is a distributed filesystem product, pioneered at Carnegie Mellon University
    OpenCASE Media AgentLMediaAgent.exeRelated to OpenCASE Media Agent from ExtendMedia, Corp. Note: Located in \%Program Files%\OpenCASE\OpenCASE Media Agent\
    openSSLXopenSSL32.exeAdded by the W32/Spybot-MY WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    OpenVPN Service (OpenVPNService)Lopenvpnserv.exeBelongs to Open VPN that seems to be a Linux VPM program that runs under Windows. File found in the C:\Program Files\OpenVPN\bin\openvpnserv.exe folder.
    Oracle Connector Automatic Updates Service (ocautoupds)Locautoupds.exeRelated to Related to Oracle products. MS Outlook Connector. Note: Located in \%Program Files%\Oracle\Outlook Connector\
    Oracle Forms Server [Forms60Server-OraForm]
    (OracleFormsServer-Forms60Server-OraForm)    		Lifsrv60.exeRelated to Oracle Corp. Forms server.
    Oracle OLAP 9.0.1.0.1 (OLAPServer)Lxsolap.exeRelated to Oracle_OLAP an option to Oracle Database 10g Enterprise Edition. Note: located in C:\oracle\ora90\bin\
    Oracle OLAP AgentLxsaagent.exeRelated to Oracle_OLAP an option to Oracle Database 10g Enterprise Edition. Note: located in C:\oracle\ora90\bin\
    Oracle Reports Server [Rep60_PDB-LAPTOP-OraDevHome]Lrwmts60.exeRelated to Oracle products
    Oracle WebDb ListenerLwdblsnr.exeRelated to Oracle products
    Oracle%ORACLE_HOME_SERVICE%ClientCache80LONRSD80.EXERelated to Oracle Networking (Net8 Server Executable)
    OracleAgent80LDBSNMP.EXERelated to Oracle products. Note: Located in \%ROOT%\orant\agentbin\
    OracleBIToolsHome2ClientCacheLONRSD.EXERelated to Oracle products
    OracleBIToolsHome3AgentLagntsrvc.exeRelated to Related to Oracle Corp.
    OracleBIToolsHome3ClientCacheLONRSD.EXERelated to Oracle products
    OracleBIToolsHome3SNMPPeerEncapsulatorLENCSVC.EXERelated to Oracle products.
    OracleBIToolsHome3SNMPPeerMasterAgentLAGNTSVC.EXERelated to Related to Oracle Corp
    OracleBIToolsHome3TNSListenerLTNSLSNR.exeRelated to Oracle products
    OracleClientCache80LONRSD80.EXERelated to Oracle products. Note: Located in \%ROOT%\orant\BIN\
    OracleCMAdminService80LCMADM80.EXERelated to Oracle products. Note: Located in \%ROOT%\orant\BIN\
    OracleCManService80LCMGW80.EXERelated to Oracle products. Note: Located in \%ROOT%\orant\BIN\
    OracleDBConsoleorclLnmesrvc.exeRelated to Oracle_DB_10g Database. Note: Located in C:\...\oracle\10g\bin\ User can install in own folder.
    OracleExtprocAgentLEXTPROCT.EXERelated to Oracle products. Note: Located in \%ROOT%\orant\BIN\
    OracleformbuilderAgentLagntsrvc.exeRelated to Oracle_Corp Note: Located in \%ROOT%\oracle\ora92form\bin\
    OracleformbuilderClientCacheLONRSD.EXERelated to Oracle_Corp Note: Located in \%ROOT%\oracle\ora92form\bin\
    OracleMTSRecoveryServiceLomtsreco.exeRelated to Oracle SQL database application
    OracleNamesService80LNAMES80.EXERelated to Oracle products. Note: Located in \%ROOT%\orant\BIN\
    Oracleora92AgentLagntsrvc.exeRelated to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\
    Oracleora92ClientCacheLONRSD.EXERelated to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\
    Oracleora92HTTPServerLapache.exeRelated to Oracle_Corp Note: Located in \%ROOT%\Apache\Apache\
    Oracleora92PagingServerLpagntsrv.exeRelated to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\
    Oracleora92SNMPPeerEncapsulatorLENCSVC.EXERelated to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\
    Oracleora92SNMPPeerMasterAgentLAGNTSVC.EXERelated to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\
    Oracleora92TNSListenerLTNSLSNR.exeRelated to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\
    OracleOraDb10g_home1iSQL*PlusLisqlplussvc.exeRelated to Oracle_DB_10g Database. Note: Located in C:\...\oracle\10g\bin\ User can install in a folder of his choice.
    OracleOraDb10g_home1TNSListenerLTNSLSNR.exeRelated to Oracle products
    OracleOraDevAgentLagntsrvc.exeRelated to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\Oradev\bin\
    OracleOraDevClientCacheLONRSD.EXERelated to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\Oradev\BIN\
    OracleOraDevClientCache80LONRSD80.EXERelated to Oracle products. Note: Located in \%ROOT%\oracle\oradev\BIN\
    Oracleorahome811CMAdminLCMADMIN.EXERelated to Related to Oracle Corp. Note: Located c:\oracle81\BIN\
    Oracleorahome811CManLCMGW.EXERelated to Related to Oracle Corp. Note: Located c:\oracle81\BIN\
    OracleOraHome81ClientCacheLONRSD.EXERelated to Oracle_Corp Note: Located in \%ROOT%\oracle\ora81\bin\
    OracleOraHome90AgentLagntsrvc.exeRelated to Oracle Intelligent Agent, used to run on a remote node in the network to make the node OEM manageable. For more information Click_Here
    OracleOraHome92AgentLagntsrvc.exeRelated to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\ora92\BIN\
    OracleOraHome92ClientCacheLONRSD.EXERelated to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\ora92\BIN\
    OracleOraHome92HTTPServerLapache.exeRelated to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\ora92\Apache\Apache\
    OracleOraHome92PagingServerLpagntsrv.exeRelated to Oracle products
    OracleOraHome92SNMPPeerEncapsulatorLENCSVC.EXERelated to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\ora92\BIN\
    OracleOraHome92SNMPPeerMasterAgentLAGNTSVC.EXERelated to Related to Oracle Corp. Note: Located in \%ROOT%\oracle\ora92\BIN\
    OracleOraHome92TNSListenerLTNSLSNR.exeRelated to Oracle products
    OracleOraHome9iClientCacheLONRSD.EXERelated to Oracle_Corp Note: Located in \%ROOT%\oracle9i\BIN\
    OracleOraHomeAgentLdbsnmp.exeRelated to Oracle products
    OracleOraHomeClientCacheLONRSD.EXERelated to Oracle products
    OracleOraHomeDataGathererLvppdc.exeRelated to Oracle products
    OracleOraHomeHTTPServerLApache.exeRelated to Oracle products
    OracleOraHomeManagementServerLOMSNTsrv.exeRelated to Oracle products
    OracleOraHomePagingServerLpagntsrv.exeRelated to Oracle products
    OracleOraHomeTNSListenerLTNSLSNR.exeRelated to Oracle products
    Oracleorant1ClientCache80LONRSD80.EXERelated to Oracle_Corp Note: Located in \%ROOT%\orant1\BIN\
    OracleorantClientCache80LONRSD80.EXERelated to Oracle_Corp Note: Located in \%ROOT%\orant\BIN\
    OracleServiceEZ01LORACLE.EXERelated to Oracle products
    OracleServicekzgrdLORACLE.EXERelated to Oracle products
    OracleServiceLOCALORALORACLE.EXERelated to Oracle products
    OracleServiceOR92LORACLE.EXERelated to Oracle products
    OracleServiceORA92LORACLE.EXERelated to Oracle_Corp Note: Located in \%ROOT%\oracle\BIN\
    OracleServiceORACLORACLE.EXERelated to Oracle products
    OracleServiceORCLLoracle80.exeRelated to Oracle products. Note: Located in \%ROOT%\orant\BIN\
    OracleServicePORTABLELORACLE.EXERelated to Oracle_Corp Note: Located in \%ROOT%\oracle\ora92form\bin\
    OracleServiceSECINSTLORACLE.EXERelated to Oracle products
    OracleSNMPPeerEncapsulatorLENCSVC.EXERelated to Related to Oracle Corp. Note: Located c:\oracle81\BIN\
    OracleSNMPPeerMasterAgentLAGNTSVC.EXERelated to Related to Oracle Corp. Note: Located c:\oracle81\BIN\
    OracleStartORCLLstrtdb80.exeRelated to Oracle products. Note: Located in \%ROOT%\orant\BIN\
    OracleTNSListener80LTNSLSNR80.EXERelated to Oracle products. Note: Located in \%ROOT%\orant\BIN\
    OracleWebAssistantLOWASTsvr.exeRelated to Oracle products. Note: Located in \%ROOT%\orant\BIN\
    OracleXEClrAgentLOraClrAgnt.exeRelated to Related to Oracle products Note: Located in C:\oraclexe\app\oracle\product\10.2.0\server\bin\
    Oracle_Load_Balancer_60_Client-Forms6iLd2lc60.exeRelated to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\
    Oracle_Load_Balancer_60_Client-Forms6ip14Ld2lc60.exeRelated to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\
    Oracle_Load_Balancer_60_Client-Forms6ip9Ld2lc60.exeRelated to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\
    Oracle_Load_Balancer_60_Server-Forms6iLd2ls60.exeRelated to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\
    Oracle_Load_Balancer_60_Server-Forms6ip14Ld2ls60.exeRelated to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\
    Oracle_Load_Balancer_60_Server-Forms6ip9Ld2ls60.exeRelated to Oracle_Load_Balancer Note: Located in C:\Oracle\version\bin\
    ORANXORAN.SYSAdded by the TROJ_ROOTKIT.N TROJAN! Read the link, rootkit type stealth involved.
    orans (orans)Xorans.sysAdded by the Troj/Rootkit-AA TROJAN! Read the link, rootkit type stealth involved.
    Orbix DaemonLORBIXDS.EXERelated to Orbix the current release of IONA's enterprise CORBA product. Note: Located in \%ROOT%\IONA\ORBIX_2.3C\BIN\
    OrbMediaServiceLOrbMediaService.exeOwner:Orb Networks
    ORBPVRLOrbPVR.exeOwner: Unkown , http://www.orb.com/
    oreans32Xoreans32.sys Troj/Agent-FYE Read the link, allows remote access
    oreans32Xoreans32.sys W32/WoWMovs-A Note:Located in C:\Windows\System\Drivers (Win9x/Me), C:\%WINDIR%\System32\Drivers (XP/WinNT/2K)
    OSCM Utility ServiceLOSCMUtilityService.exeRelated to Novatel Wireless Service from Sprint phones and connectivity cards. Note: Located in C: \Program Files\Novatel Wireless\Sprint\
    OSdebug (Microsoft Regulator)Xmsoevc.exeAdded by the W32/Tilebot-CV WORM! Note: located in \%WINDIR%\
    OTi Card Reader ServiceLOTiReader.exe OTI_Globals contact/contactless smart card reader. Location: Program Files\CardReader2.0 folder.
    Outpost Firewall Service (OutpostFirewall)Loutpost.exeAgnitum Outpost firewall service
    OvEpStatusEngineLOvEpStatusEngine.exeHP OpenView Status Engine
    OvMsmAccessManagerLOvMsmAccessManager.exeHP OpenView Access Manager
    OvSecurityServerLOvSecurityServer.exeHP OpenView Security Server
    OwnershipProtocolLOProtSvc.exeRelated to PROSet Wireless Software from Intel
    Engine Version 2.0 by CastleCops
    2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
    Acceptable Use Policy. Use signifies your agreement.
    128ppm 0.195s (0.008s)
    Making cybercriminals unhappy since 2002*
    In Memory of Trpm
    spacer spacer