CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    ARC Plugin (ARCPLUG)Xarci.exeAdded by the W32/Tilebot-HB WORM! Note: This worm\trojan is located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K) Steal information from Protected Storage
    ArcaBit FileMonitor (ABFileMon)LFileMonSV.exe AcraVir
    ArcaBit NetMonitor (ABNetMon)LNetMonSV.exe ArcaVir an AntiVirus software from Poland. A procuct of ArcaBit Sp. z o.o
    ArcaBit Update Service (AVUpdate)Lupdate.exe AcraVir
    ArcaBit.Core.ConfiguratorLArcaBit.Core.Configurator2.exe AcraVir
    ArcaBit.Core.LoggingServiceLArcaBit.Core.LoggingService.exe AcraVir
    ArcaBit.TaskSchedulerLtaskscheduler.exe AcraVir
    ArchestrA Logger (aaLogger)LaaLogger.exeRelated to ArchestrA Software architecture for the integration of your automation systems.
    ARcltsrvLARCLTSRV.EXECryptography software by Algorithmic Research Ltd.
    ArcSoft Connect Daemon (ACDaemon)LACService.exeRelated to ArcSoft_Connect_Daemon from ArcSoft, Inc. Note: Located in \%Program Files%\
    Ares Chatroom server (AresChatServer)LchatServer.exeRelated to the Ares P2P software
    Argos Billing DialogLWorkstationMonitor.exeRelated to Argos_Billing_Dialog from Sepialine inc. Print Monitor. Note: Located in c:\Program Files\Sepialine\Argos Print Monitor\
    ArGoSoft Mail Server PlusLmailservernt.exeRelated to ArGo Software Design Mail Server
    Array SSL VPN Service 3,0,1,9
    (ArraySSL_VPN_Service3,0,1,9)
    Larr_srvs3,0,1,9.exeRelated to SSL_VPN SSL VPN Secure Access Gateways from Array Networks. Anytime, anywhere secure access. Note: Located in C:\Program Files\Array Networks\Array SSL VPN\3,0,1,9\
    Array SSL VPN Service 8,1,0,307
    (ArraySSL_VPN_Service8.1.0.307)
    Larr_srvs.exeRelated to Array_SSL_VPN from Array Networks, Inc. Service. Note: Located in \%Program Files%\Array Networks\Common\8,1,0,307\
    Array Utility Service 4,0,1,3
    (Array_Utility_Service4,0,1,3)
    Larr_isrv4,0,1,3.exeRelated to SSL_VPN SSL VPN Secure Access Gateways from Array Networks. Anytime, anywhere secure access. Note: Located in C:\Program Files\Array Networks\Common\4,0,1,3\
    Array Utility Service 8,1,0,307
    (Array_Utility_Service8.1.0.307)
    Larr_isrv.exeRelated to Array_SSL_VPN from Array Networks, Inc. Service. Note: Located in \%Program Files%\Array Networks\Common\8,1,0,307\
    Artificial Dynamics SafeSpace AgentLSafeSpace_Agent.EXERelated to SafeSpace from Artificial Dynamics. Protects computers from Internet malware infection without the need for signature updates. Note: Located in \%Program Files%\Artificial Dynamics\SafeSpace\
    Artificial Dynamics WAVE Launcher Service (WAVE
    Launcher Service)
    LLauncherService.exeRelated to SafeSpace from Artificial Dynamics. Protects computers from Internet malware infection without the need for signature updates. Note: Located in \%Program Files%\Artificial Dynamics\SafeSpace\
    Ascent Capture ServiceLacsvc.exeRelated to Kofax Image Products.
    ASF AgentLASFAgent.exe Intel Alert Standard Format Console - asfagent.exe is a part of a systems management suite bundled with other applications, mainly Dell's OpenManage.
    Ashampoo AntiSpyWare 2 Service (AASW2_Service)LAntiSpyWareService.exeRelated to Ashampoo_AntiSpyWare Note: Located in \%ROOT%\Ashampoo AntiSpyWare 2\
    AshampooDefragServiceLaDefragService.exeRelated to Ashampoo Magic Defrag Utility
    asKernelLASKERNEL.EXERelated to Aluria_Software's - Aluria Security Center Note: Located in Center. C:\PROGRA~1\ALURIA~2\
    ASLDR Service (ASLDRService)LASLDRSrv.exeRelated to ATK_Hotkey on ASUSTeK Computer. Note: Located in \%Program Files%\ATK Hotkey\
    ASMAgentLASMAgent.exeRelated to ASAP_eSMART Smart Asset Management tool.
    ASNFTP daemon (ASNFTPD)XAsnFtpd.exeAdded by the W32/Tilebot-BD WORM! Note: This worm\trojan file is found in the Windows or Winnt folder. Read the link, rootkit type stealth involved.
    ASP.NET (State Service)ASP.NET.exe Troj/GrayBir-EC Note: Located in %windir% Read the link allows remote access
    ASP.NET State Service (aspnet_state)Laspnet_state.exeRelated to Microsoft Windows Operating System and is the ASP State Service.
    Asset Insight Client (AICLIENT)LAiclient.EXEAsset Insight from Tangram - http://castlecops.com/s1883-AICLIENT_EXE.html
    Asset Management Agent (AmoAgent)LUMCSTUB.EXERelated to Unicenter Asset Management by Computer_Associates
    Asset Management DaemonLdtsslsrv.exeDisplay configuration software used by several manufacturers under differing names such as Image Tune or EZTune etc... Note: located in C:\Program Files\...
    Asset Management SW Meter Agent (SWMSVC)LSWMSvc.exeRelated to Asset_Management from Computer Associates. Note: Located in \%Program Files%\\CA\Unicenter Asset Management\Agents\
    AST Service (astcc)Lastsrv.exe Nalpeiron Trusted Activation This service exists if an application protected with PRO-Tector is installed Note:C:\%WINDIR%\System32 (XP/WinNT/2K)
    Asus Motherboard Utility (Asus)Xasus.exeAdded by the WORM_SPYBOT.IY WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    Asus Protocol Driver ControlXwingptd.exeAdded by a variant of the Backdoor.Win32.VanBot.jd Note: Located in \%WINDIR%\System32\dllcache\
    ASUSKeyboardServiceLasuskbservice.exeAdded by ASUS_Keyboard Service and provides additional configuration options for these devices. Note: located in C:\%WINDIR%\
    ASWLSVCLASWLSVC.exeRelate to the ASUS_Wireless_LAN_Card_Services
    Asynchronous Load Balance (ySvcHst)Xsrvnst.exeAdded by ServiceThreadHandler.Process TROJAN! Note: located in C:\WINDOWS\System32\
    Asynchronous UPnP Support ServicesXUPnPSvc.dll Troj/PWS-ANB Read the link, steals information
    AT Host ServiceLatnthost.exeRelated to WebEx
    AT&T Internet Security Suite AT&T Firewall (RP_FWS)LFws.exeRelated to Internet_Security_Suite from AT&T Note: Located in \%Program Files%\\AT&T\AT&T Internet Security Suite\
    AT&T Internet Security Suite Service (RPSUpdaterR)LrpsupdaterR.exeRelated to Internet_Security_Suite from AT&T Note: Located in \%Program Files%\AT&T\AT&T Internet Security Suite\
    Atheros Configuration Service (ACS)Lacs.exerelated to Atheros Wireless LAN
    Ati External Event UtilityLAti2evxx.exeATI Video Card Control Panel
    Ati HotKey (audieqaab)Xlmgua.exeAdded by a variant of the Backdoor.Oderoor Note: Located in \%WINDIR%\System32\ Note: Use SDFix under supervision. Note:Random names are used for the service and filename.
    Ati HotKey PollerLAti2evxx.exeATI Video Card Control Panel
    ATI SmartLati2sgag.exeATI Video Card Control Panel
    ATI WebPAM (ATIWebPAM)LWrapper.exeRelated to ATI_Array ATI WebPAM&hl=en&ct=clnk&cd=2&gl=ca&lr=lang_en|lang_fr Management Software. Note: Located in \%Program Files%\ATI\WebPAM\jetty\extra\win32\
    ATIintergrated (ATIintergrated)Xatigraphics.exeAdded by the SDBOT.CRX WORM! Read the link, rootkit type stealth involved.

    Engine Version 2.0 by CastleCops

    spacer spacer