Added by the Sensible Vision face recognition software.

Windows service used by AVG anti-virus.

Legitimate Windows service related to Wacom Tablets.

Legitimate Windows service related to Wacom Tablets.

Services used to create system snapshots in Ghost and Backup Exec. If this service is not running it could cause certain functionality to be disabled from these programs.

Added by the HTC Sync Manager synchronization software for HTC phones.

Added with the software for Creative Technology's VF0410 model of web camera.  This service file is part of the automatic launching of the camera software.  Camera may be started manually, so this service may be set to manual.

Added with the software for Creative Technology's VFO380 model of web camera.  This service file is part of the automatic launching of the camera software.  Camera may be started manually, so this service may be set to manual.

Required service for ESET NOD32 antivirus. This file can also be found in the %ProgramFiles%\Eset\nod32krn.exe folder.

Preinstalled on many computers, this driver by Broadcom is part of the software for the wireless networking components of the computer.

Malware file.

Malware.  Sophos identifies it as Troj/FkAvDl-Fam

Part of a product by ResolutionMSP. Does anyone know anything further about this file and what it does?

Malware file which is often associated with backdoors and trojans and other sorts of malware.  May show a company name such as Sysinternals.com.

Malware file which is often associated with backdoors and trojans and other sorts of malware.

Sample random names:

Application Experience Lookup Service ==> AeLookupSvcAlerter

Alerter AlerterALG ==> AlerterALG

Ad-Aware 2007 Service aawservice LM Service ==> aawservice LM Service

Malware file which is often associated with backdoors and trojans and other sorts of malware.

Do not confuse the service name with the legitimate service AeLookupSvc.

Installed, sometimes by updates, on certain HP media and entertainment computers.  Connected with the Front Panel Display on these computers.

Added by Squid, a web-caching proxy intended to reduce bandwidth usage and speed up data transfer in a server client computer setup.  This program is generally installed on the server not the client machine.  If your computer is not a server, check with your network administrator to see if this file should be on your computer.

Added by Squid, a web-caching proxy intended to reduce bandwidth usage and speed up data transfer in a server client computer setup.  This program is generally installed on the server not the client machine.  If your computer is not a server, check with your network administrator to see if this file should be on your computer.

Added by Squid, a web-caching proxy intended to reduce bandwidth usage and speed up data transfer in a server client computer setup.  This program is generally installed on the server not the client machine.  If your computer is not a server, check with your network administrator to see if this file should be on your computer.

Malware file. Usually other malware on the computer as well. Do not confuse with the legitimate service named AeLookupSvc.

Malware file.  Usually other malware on the computer as well.  Do not confuse with the legitimate service named AeLookupSvc.

Malware file.  Usually other malware on the computer as well.  Do not confuse with the legitimate service named AeLookupSvc.

This file is the main executable for Sybase's Adaptive Server Anywhere version 8, also known as sql anywhere, intended for use in a server client setup.  Given that, please check with the database manager about whether this service needs to run at startup.  Note that the database is on the server, or should be to avoid file corruption.  There are ways to start the file manually, but that would have to be set by the one managing the database and server in question.  If you are NOT in a client server environment, this is not the correct version of the software to use for database management.

This file is the main executable for Sybase's Adaptive Server Anywhere version 8 personal database server, also known as sql anywhere, intended for use on a standalone computer and may be used for development.  Number of simultaneous connections are 10.  It is not for use in a server client setup; a different version of the software is needed for that.  There are ways to set up the software so that this file starts manually, such as when opening the database.  Please read the software manual for how to do that if you prefer to start the program manually.

This file is the main executable for Sybase's Adaptive Server Anywhere version 7 personal database server, also known as sql anywhere, intended for use on a standalone computer and may be used for development.  Number of simultaneous connections are 10.  It is not for use in a server client setup; a different version of the software is needed for that.  There are ways to set up the software so that this file starts manually, such as when opening the database.  Please read the software manual for how to do that if you prefer to start the program manually.

Installed with the software for Skype, this is the service for automatically updating the software.  The software may be updated manually.

 UNC/FAT is an add-in by Microsoft to Windows Desktop Search for use on networks to index shared folders and FAT drives.  Must run in order for the indexing to work.  If you don't want this feature, uninstall the add-in

Part of the Trusted Platform Module(TPM) of Infineon Security Platform Software bundled on certain laptops from companies such as Acer, ASUS, HP and Sony.  Necessary if you use the TPM.

Note that the file path and thus the command may vary depending on who assembled the computer.

Variations include:

%Windir%\SysWOW64\IFXSPMGT.exe for 64 bit machines

%programfiles%\Hewlett-Packard\Embedded Security Software\ifxspmgt.exe

%programfiles%\Infineon\Security Platform Software\ifxspmgt.exe

This is Checkpoint's core file for ZoneAlarm's browser protecting application called ForceField.  It protects your browser from various web-based attacks, such as drive by malware and phishing attacks by turning it into a virtual browser.

This is Checkpoint's core file for ZoneAlarm's browser protecting toolbar called ForceField.  It protects your browser from various web-based attacks, such as drive by malware and phishing attacks.

Added by various versions of NTRU Cryptosystem software by SecurityInnovation. Preinstalled on many computers, TCG Software Stack (TSS) is a library that allows access to the Trusted Platform Module security chip which is on many motherboards.  It is used primarily by applications such as Wave Embassy Suite.  If you are not using the Trusted Platform Module, this service can be disabled.

Part of the SuperAntiSpyware security program.

Bundled with certain Lenovo Notebooks and ThinkPads, HyperW7 Service is the core of the Rapid Boot utility that aids in significantly reducing boot-times by optimizing what starts when.

Part of the virtual MS Office software called Click to Run which may be preinstalled on certain computers.  This file is responsible for updating the software in the background.  If you wish to use the traditional office software, it is advised to remove the virtual version, then download the traditional installation package being sure to get the proper version and suite so your license key will work.  Please note that the numbering scheme for Click to Run is different than for the traditional software.  For example: Office 12 is Office 2007, and Office 11 is Office 2003.

Added by the Cobian Backup backup software. This allows the backup to access Windows Shadow Volume.

Installed with various Broadcom Management applications, and preinstalled on certain computers such as Dell and disabled by default, this service monitors changes to the NIC card's IP address, subnet mask, and gateway updating that information to the NIC.  Unneeded on standalone computers.

Found on certain Hewlett-Packard desktop and laptop computers, this file is the background service for Quick Launch Buttons on the keyboard. This service must run for these buttons to work.  By default, it is set to manual.

Added by various ISPs as part of their support software.

Part of the Soluto computer optimization software.

SSL VPN software from Array Networks.

SSL VPN software from Array Networks.

Added by ESET security products.

Added by ESET security products.

Added by the FlexNet Publisher license manager.

Server responsible for enabling you to share Flip Media.

Used by Futuremark to get information about the installed hardware.

Part of the TeamViewer software.

Remote access service for registration and management of VMware virtual machines.

This Windows service is used by FireFox to silently update the program without displaying a Windows User Account Control (UAC) dialog.

Updater for the AVG Secure Search browser toolbar.

Service added by the Shadow Explorer.

Used by FitBit to wireless sync your data to the FitBit website.

Windows service that applies patches to games from Hi-Rez Studios.

Installed with the software for certain wireless modems, this file is the modem's Datacard service.  The datacard allows the modem to pick up wireless signals from cell towers.

This is the system restore service necessary for your computer to create snapshots of the computer so you can roll back to an earlier point if something goes wrong. 

Added by the VZAccess Manager software. Related to 4G LTE connectivity.

Added by the ACCDFISA Ransomware.

Added by the ACCDFISA Ransomware.

Added by the Nalpeiron Licensing Service licensing software.

Application used by broadband modems that contain ZETMT chipsets.

Added by the Akamai NetSession downloader. This is a service launched by the legitimate C:\Windows\System32\svchost.exe program. The actual executable file for the Akamai NetSession Interface service is %ProgramFiles%\common files\akamai\netsession_win_b427739.dll.

Related to the LogMeIn remote management software.

Related to the LogMeIn remote management software. This driver supports LogMeIn processes with quality assurance feedback

This file is the main executable for Sybase's Adaptive Server Anywhere version 9, also known as sql anywhere, intended for use in a server client setup.  Given that, please check with the database manager about whether this service needs to run at startup.  Note that the database is on the server, or should be to avoid file corruption.  There are ways to start the file manually, but that would have to be set by the one managing the database and server in question.  If you are NOT in a client server environment, this is not the correct version of the software to use for database management.

Added by the Troj/Hupigon-UT Trojan.

Added by the SoftThinks backup and recovery software commonly bundled on new computers from various manufacturers.

Intel software for managing Raid drives on Intel chipsets.

Installed by Dell Dock. Only need to start if you use Dell Dock.

Part of Andrea's APO Access Service, this is the 64-bit version of a filter service generally used to filter out background noise etc. when using a microphone.  Often associated with drivers for various sound and audio cards.

Note that the file path may also be %System%

Driver for various wireless network cards.

Microsoft service that periodically determines if your Windows Product ID is valid, and if not, displays warnings that your copy of Windows may not be Genuine.

Part of Symantec/Norton security products.

Added by the PowerDVD universal media player.

Added by Tera Innovations ViruScape antivirus program. This program is no longer being sold.

McAfee service that cleans up installations files created by a previous installation or update. After this service is run, it should automatically remove itself.

Unknown malware.

The Microsoft Full-Text Engine for SQL Server (MSFTESQL) service is a full-text indexing and search engine. The MSFTESQL engine is built on Microsoft Search (MSSearch) technology.

The full-text engine runs as a service named MSFTESQL on the operating system. This service is installed by default but runs only when Full-Text Search is being used. By default, SQL Server and MSFTESQL run under the same service account. You can specify a different account by using SQL Server Configuration Manager.

IF MSSQL is installed as a named instance, its name will reflect the version of MSSQL being installed or the program that is using it. For example, other Service Names you may see include msftesql$DEVELOPER2005, msftesql$LOCAL2005, msftesql$SQLSERVER2005, etc.

Added by the SQL Backup database backup program.

Added by the SQL Anywhere database utility.

Unknown malware.

SQL Server Browser runs as a Windows service on the server. SQL Server Browser listens for incoming requests for SQL Server resources and provides information about SQL Server instances that are installed on the computer. SQL Server Browser contributes to three actions:

• Browsing a list of available servers
  
• Connecting to the correct server instance
  
• Connecting to Dedicated Administrator Connection (DAC) endpoints
  

For each instance of the Database Engine, the SQL Server Browser service (sqlbrowser) provides the instance name and the version number. SQL Server Browser is installed with SQL Server 2005 and provides assistance for previous versions of SQL Server that are running on that computer, starting with SQL Server 7.0.

By default, the SQL Server Browser service is not enabled for SQL Server Express. SQL Server Browser can be initially configured using the Surface Area Configuration Tool and managed using SQL Server Configuration Manager.

Unknown malware.

Identified by Kaspersky antivirus as a variant of the Packed.Win32.Krap.il malware. Please note that C:\Windows\system32\svchost.exe is a legitimate file and should not be deleted.

Identified by Microsoft as a variant of the Trojan:Win32/Malex.gen!E malware. This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file.

The main executable for Microsoft SQL Database Server.

If Microsoft SQL Server is installed as a named instance the Service and Display names will be different then what is shown in this entry. Instead, the names and path will reflect the version of MSSQL being installed or the program that is using it. For example, other Service Names you may see include MSSQL$ACRONIS, MSSQL$AUTODESKVAULT, MSSQL$DEVELOPER2008, MSSQL$ENCOREPRO, MSSQL$MICROSOFTBCM, MSSQL$MICROSOFTSMLBIZ, MSSQL$SONY_MEDIAMGR2, MSSQL$SQLEXPRESS, MSSQL$SQLSERVER2005, etc.

The files for this service may be installed a variety of different paths, which may include the MSSQL version number.

SQL Server Agent is a Microsoft Windows service that allows you to automate various MSSQL administrative tasks, which are called jobs. SQL Server Agent uses SQL Server to store job information. Jobs contain one or more job steps. Each step contains its own task, for example, backing up a database. SQL Server Agent can run a job on a schedule, in response to a specific event, or on demand. For example, if you want to back up all the company servers every weekday after hours, you can automate this task. Schedule the backup to run after 22:00 Monday through Friday; if the backup encounters a problem, SQL Server Agent can record the event and notify you. If you disable this service, then any scheduled MSSQL tasks will not run.

As such, you must start the SQL Server Agent (MSSQLSERVER) service before your local or multiserver administrative tasks can run automatically. SQL Server Agent runs as a service called SQL Server Agent (MSSQLSERVER), if it is the default instance, or SQLAgent$, if it is a named instance. IF MSSQL is installed as a named instance, its name will reflect the version of MSSQL being installed or the program that is using it. For example, other Service Names you may see include SQLAgent$SQLDEVELOPER, SQLAgent$SQLSERVER2008, SQLAgent$DEVELOPER2008, SQLAgent$AUTODESKVAULT, SQLAgent$MICROSOFTSMLBIZ, SQLAgent$PINNACLESYS, SQLAgent$SONY_MEDIAMGR, SQLAgent$VAIO_VEDB, SQLAgent$SQLEXPRESS, etc.

The files for this service may be installed a variety of different paths, which may include the MSSQL version number.

Part of the software suite bundled with Sony VAIO laptops.

Added by Microsoft's Windows Feedback Program utility.

Added by the PowerAlert power management software by Tripp Lite. This service is required for PowerAlert to properly monitor UPS ports.

Part of the Desktop Authority administration program.

Added by the SPEEDbit Video Accelerator video acceleration program.

Related to Norton PC Checkup.

Driver used by the Kaspersky Anti-Virus.

Research indicates that this program is adware.

This file is preinstalled on many computers, is in many monitor software packages, and is involved in adjusting monitor display settings by using a mouse instead of the monitor buttons.  EzTune, MagicTune, ImageTune, and forteManager are just a few of the software products this file is found in.  If using the monitor buttons is sufficient for you, you can disable the service.  Unknown at this time if setting the service to manual would cause the program to not work.

This file is preinstalled on many computers, is in many monitor software packages, and is involved in adjusting monitor display settings by using a mouse instead of the monitor buttons.  EzTune, MagicTune, ImageTune, and forteManager are just a few of the software products this file is found in.  If using the monitor buttons is sufficient for you, you can disable the service.  Unknown at this time if setting the service to manual would cause the program to not work.

This file is preinstalled on many computers, is in many monitor software packages, and is involved in adjusting monitor display settings by using a mouse instead of the monitor buttons.  EzTune, MagicTune, ImageTune, and forteManager are just a few of the software products this file is found in.  If using the monitor buttons is sufficient for you, you can disable the service.  Unknown at this time if setting the service to manual would cause the program to not work.

This file is an Input Output Control Service associated with a number of applications and file paths and generally detects the presence of flash drives or other memory devices using USB.  Published by Prolific Technology Inc., this service can in many cases be disabled.  However, there is indication that if you have an external hard-drive, this service is essential for communications to occur.  Whether setting the service to manual would cause problems in this situation has not been determined.

This file is an Input Output Control Service associated with a number of applications and file paths and generally detects the presence of flash drives or other memory devices using USB.  Published by Prolific Technology Inc., this service can in many cases be disabled.  However, there is indication that if you have an external hard-drive, this service is essential for communications to occur.  Whether setting the service to manual would cause problems in this situation has not been determined.