CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

spacer spacer

O23 List of Windows XP/NT services

Currently 4053 entries and growing...
Last updated on 2008-08-02 17:32:28 Eastern.


This list was originally started at SpywareAid with 730 entries and Matt gave CastleCops permission to host it. CastleCops has since (May 2005) been adding new entries to it here. The new items may not be in the original list but attempts are made to ensure the original is also updated. The full HTML list is here.

KEY:
  • "L" = Legitimate
  • "O" = Open to Debate
  • "X" = Malware/Bad
  • "?" - Unknown

  •   

    ABC List: A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z




    Full List

    NameStatusFilenameDescription
    PGPsdkServiceLPGPsdkServ.exePGP Software
    PGPservLPGPserv.exeRelated PGP Corp. http://www.pgp.com/
    PHAROS Distribution Agent (PSDistributionAgent)LDistAgnt.exeRelated to Pharos_Science_ & Applications, Inc. Pharos develops advanced GPS navigation and mobile location-based services. Note: located in C:\PROGRAM FILE\PHAROS\bin\
    Pharos Systems ComTaskMasterLCTskMstr.exeRelated to Pharos_Systems print asset management. Note: Located in C:\PROGRAM FILES\Pharos\bin\
    Phoenix PSA Service (PhnxPsaService)LPhxPsSvr.exeRelated to PSA_Service from Phoenix Technologies Ltd. Note: Located in \%WINDIR%\System32\
    Phoenix Vault Service (PhnxVaultService)LPhxVtSvr.exeRelated to Vault_Service from Phoenix Technologies Ltd. Note: Located in \%WINDIR%\System32\
    Phoenix VCD Service (PhnxVCDService)LPhnxCDSvr.exeRelated to Phoenix_Technologies
    Photoshop Elements Device Connect
    (PhotoshopElementsDeviceConnect)
    LPhotoshopElementsDeviceConnect.exe Related to Adobe photoshop.
    PI Message Subsystem (pimsgss)Lpimsgss.exeRelated to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:\Program Files\PIPC\BIN\
    PI Network Manager (pinetmgr)Lpinetmgr.exeRelated to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:\Program Files\PIPC\BIN\
    PI-Buffer Server (bufserv)Lbufserv.exeRelated to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:\Program Files\PIPC\BIN\
    PictureTakerLPCTKRNT.SYSLANovation's PictureTaker Enterprise Edition 3.1 lets administrators create software update packages and deploy them to network PCs through a third-party network management suite
    Pigeon (PigeonServer)XGServer2.exeAdded by the Troj/GrayBrd-AK TROJAN! Note: This worm\trojan file is found in the System (95/98/ME) or System32 (NT/2000/XP) folder.
    Pigeon_Server (PigeonServer)XServer.exeAdded by the Backdoor.Graybird.R TROJAN! Note: This trojan file is found in the Windows or Winnt folder.
    pingerOpinger.exeRelated to Toshiba Service that regularly checks for software updates. Note: Located in \%ROOT%\TOSHIBA\IVP\ISM\
    Pinnacle Systems Media Service
    (PinnacleSys.MediaServer)
    Lpmshost.exeRelated to Pinnacle_Systems Inc.
    Pinnacle Systems tvtv Spooler (EpgSpooler)Lepgspo~2.exeRelated to Pinnacle Studio Plus.
    PinnacleUpdate Service (PinnacleUpdateSvc)Lpinnacle_updater.exeRelated to Pinnacle_Game_Profiler ADD GAME PAD AND JOYSTICK SUPPORT TO ANY GAME INSTANTLY! Note: Located in \%Program Files%\KALiNKOsoft\Pinnacle Game Profiler\
    PIPC Log Server (pilogsrv)Lpilogsrv.exeRelated to OSI_Software Real-time Performance Management (RtPM) Platform. Note: located in C:\Program Files\PIPC\BIN\
    Pixar Alfred Server 11.5.3Lalfserver.exeRelated to Pixar_Alfred_Server Server includes all the tools required for rendering images for film and video productions. Note: Located in C:\Program Files\Pixar\RenderManProServer-11.5.3\bin\
    PixelModule (pxlmdl)Xnvidcgui.exeAdded by the W32/Tilebot-GS WORM! Read the link, rootkit type stealth involved.
    PIXMA Extended Survey Program (IJPLMSVC)LIJPLMSVC.EXERelated to Canon Extended Maintenance Service. Note: Located in \%Program Files%\Canon\IJPLM\
    Planificateur LiveUpdate automatiqueLALUSchedulerSvc.exeRelated to to the Symantec LiveUpdate service which updates your Symantec products periodically.
    Planner voor Automatische LiveUpdateLALUSchedulerSvc.exeRelated to to the Symantec LiveUpdate service which updates your Symantec products periodically.
    PLFlash DeviceIoControl ServiceLIoctlSvc.exeRelated to PLFlash_DeviceIoControl Service from Prolific Technology Inc. Note: located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    PLSRemote Service (PLSRemoteSvc)OPLSRemote.exeRISKWARE! or potentially unwanted application. This application may have been installed by your system administrator for providing support for your machine. However this application has been used by several trojan authors and included in other trojans for malicious purposes. For more information CLICK_HERE
    Plug and Play (PlugPlay)Lservices.exeSpanish Windows 2000 Plug and Play
    Plug and Play (RPC) (PlugPlayRPC)Xportsv.exeAdded by the Trojan.Dropper/Gen-PortSv.Process Note: located in \%WINDIR%\ Note: Use sUBs Combofix tool under supervision.
    Plug and Play Device Host (Universal Plug and Play)XWeRecl.exeAdded by Worm_Ircbot_Gen WORM! Note: This worm\trojan is located in C:\%WINDIR%\ folder.
    Plug and Play Device Manager ($sys$DRMServer)X$sys$DRMServer.exeThis is the Sony-BMG ROOTKIT! Do not try to manually remove this! For more information check Mark Russinovich's Blog_Here or Google Sony Rootkit.
    pluginXPLUGIN.EXEAdded by the SDBOT.BUH WORM! Read the link, rootkit type stealth involved.
    PMJ151 AutoLaunch Service (PMJ151LA)LPMJ151LA.BINRelated to Panasonic_DVC_Web_Camera Note: Located in C:\%WINDIR%\
    pmlL
    pmlL
    Pml DriverLHPHipm09.exeRelated to HP printers
    Pml Driver HPH11LHPHipm11.exeHP PML Driver for HP.s Photosmart printers.
    Pml Driver HPZ12LHPZipm12.exeRelated to HP printers.
    pmldriver hpz12L
    PMounterLPMounter.exePartition Mounter task installed with the Paragon Hard Disk Manager software. (answers that work)
    PMSveHLPMSveH.exeRelated to Lenovo part or IBM ThinkVantage, Note: Located in C:\WINDOWS\system32\
    PnkBstrALPnkBstrA.exeRelated to PunkBuster from Even Balance, Inc. Service that look for cheats while users are playing on PunkBuster enabled servers. Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    PnkBstrBLPnkBstrB.exeRelated to PunkBuster from Even Balance, Inc. Service that look for cheats while users are playing on PunkBuster enabled servers. Note: Located in C:\Windows\System (Win9x/Me), C:\%WINDIR%\System32 (XP/WinNT/2K)
    pnpextXwmc.exeAdded by the Troj/LeechPie-D TROJAN! Note: The file wmc.exe is a legitimate remote administration tool, but in this case is being used by the trojan.
    Policy AgentXsvchost.exe -k Policy AgentAdded by the Fuwudoor TROJAN!
    Pop-Up Stopper Anti-Spyware Service (PWISVC)LPWISVC.EXERelated to Pop-Up_Stopper_Anti-Spyware from Panicware. Note: Located in C:\Program Files\Panicware\Pop-Up Stopper Anti-Spyware\
    Portrait Displays Display Tune Service (DTSRVC)Ldtsrvc.exeRelated to MagicTune by SAMSUNG.
    Posadis 0.60.6Lposadissrv.exeRelated to Posadis A DNS server for Unix and Windows platforms, supporting authoritative service (master/slave) as well as caching. Note: Located in \%Program Files%\Posadis 0.60.6\
    PostgreSQL Database Server 8.0 (pgsql-8.0)Lpg_ctl.exeRelated to PostgreSQL open source database.
    PostgreSQL Database Server 8.2 (pgsql-8.2)Lpg_ctl.exeRelated to PostgreSQL open source database.
    Power Adapter (ADIDown)Xsvchost.exe Troj/Maran-AB Read the link, steals information

    Engine Version 2.0 by CastleCops

    spacer spacer