| Name |
Filename |
Status |
Description |
|
Nalpeiron Licensing Service
|
nlssrv32.exe
|
Y
|
Added by the Nalpeiron Licensing Service licensing software.
|
|
UDisk Monitor
|
MonServiceUDisk.exe
|
Y
|
Application used by broadband modems that contain ZETMT chipsets.
|
|
Akamai NetSession Interface
|
netsession_win_b427739.dll
|
U
|
Added by the Akamai NetSession downloader.
This is a service launched by the legitimate C:\Windows\System32\svchost.exe program. The actual executable file for the Akamai NetSession Interface service is %ProgramFiles%\common files\akamai\netsession_win_b427739.dll.
|
|
LogMeIn Maintenance Service
|
RaMaint.exe
|
Y
|
Related to the LogMeIn remote management software.
|
|
LMIGuardianSvc
|
LMIGuardianSvc.exe
|
Y
|
Related to the LogMeIn remote management software. This driver supports LogMeIn processes with quality assurance feedback
|
|
Server2010
|
Server2010.exe
|
X
|
Added by the Troj/Hupigon-UT Trojan.
|
|
SoftThinks Agent Service
|
sftservice.EXE
|
U
|
Added by the SoftThinks backup and recovery software commonly bundled on new computers from various manufacturers.
|
|
Intel(R) Rapid Storage Technology
|
IAStorDataMgrSvc.exe
|
U
|
Intel software for managing Raid drives on Intel chipsets.
|
|
Dock Login Service
|
DockLogin.exe
|
U
|
Installed by Dell Dock. Only need to start if you use Dell Dock.
|
|
Virtual WiFi Filter Driver
|
vwififlt.sys
|
Y
|
Driver for various wireless network cards.
|
|
Windows Activation Technologies Service
|
WatAdminSvc.exe
|
Y
|
Microsoft service that periodically determines if your Windows Product ID is valid, and if not, displays warnings that your copy of Windows may not be Genuine.
|
|
LiveUpdate Notice
|
ccSvcHst.exe
|
Y
|
Part of Symantec/Norton security products.
|
|
Power Control [date]
|
000.fcl
|
Y
|
Added by the PowerDVD universal media player.
|
|
ViruScape Guard Service
|
VS32.exe
|
Y
|
Added by Tera Innovations ViruScape antivirus program. This program is no longer being sold.
|
|
McAfee Application Installer Cleanup (random numbers)
|
<random #s>~1.exe
|
Y
|
McAfee service that cleans up installations files created by a previous installation or update. After this service is run, it should automatically remove itself.
|
|
sv_ajnag
|
svajnager.exe
|
X
|
Unknown malware.
|
|
SQL Server FullText Search (MSSQLSERVER)
|
msftesql.exe
|
Y
|
The Microsoft Full-Text Engine for SQL Server (MSFTESQL) service is a full-text indexing and search engine. The MSFTESQL engine is built on Microsoft Search (MSSearch) technology.
The full-text engine runs as a service named MSFTESQL on the operating system. This service is installed by default but runs only when Full-Text Search is being used. By default, SQL Server and MSFTESQL run under the same service account. You can specify a different account by using SQL Server Configuration Manager.
IF MSSQL is installed as a named instance, its name will reflect the version of MSSQL being installed or the program that is using it. For example, other Service Names you may see include msftesql$DEVELOPER2005, msftesql$LOCAL2005, msftesql$SQLSERVER2005, etc.
|
|
SQL Backup Agent
|
SQBCoreService.exe
|
Y
|
Added by the SQL Backup database backup program.
|
|
SQL Anywhere - bsiv
|
dbeng50.exe
|
Y
|
Added by the SQL Anywhere database utility.
|
|
SQL Server Browser
|
HotStartUserAgent32.exe
|
X
|
Unknown malware.
|
|
SQL Server Browser
|
sqlbrowser.exe
|
Y
|
SQL Server Browser runs as a Windows service on the server. SQL Server Browser listens for incoming requests for SQL Server resources and provides information about SQL Server instances that are installed on the computer. SQL Server Browser contributes to three actions:
-
Browsing a list of available servers
-
Connecting to the correct server instance
-
Connecting to Dedicated Administrator Connection (DAC) endpoints
For each instance of the Database Engine, the SQL Server Browser service (sqlbrowser) provides the instance name and the version number. SQL Server Browser is installed with SQL Server 2005 and provides assistance for previous versions of SQL Server that are running on that computer, starting with SQL Server 7.0.
By default, the SQL Server Browser service is not enabled for SQL Server Express. SQL Server Browser can be initially configured using the Surface Area Configuration Tool and managed using SQL Server Configuration Manager.
|
|
MSSQLAgent Service
|
MSSQLAgent.exe
|
X
|
Unknown malware.
|
|
srvD8
|
srvD8.tmp
|
X
|
Identified by Kaspersky antivirus as a variant of the Packed.Win32.Krap.il malware. Please note that C:\Windows\system32\svchost.exe is a legitimate file and should not be deleted.
|
|
srvbtcclient
|
svchost.exe
|
X
|
Identified by Microsoft as a variant of the Trojan:Win32/Malex.gen!E malware. This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file.
|
|
SQL Server (MSSQLSERVER)
|
sqlservr.exe
|
Y
|
The main executable for Microsoft SQL Database Server.
If Microsoft SQL Server is installed as a named instance the Service and Display names will be different then what is shown in this entry. Instead, the names and path will reflect the version of MSSQL being installed or the program that is using it. For example, other Service Names you may see include MSSQL$ACRONIS, MSSQL$AUTODESKVAULT, MSSQL$DEVELOPER2008, MSSQL$ENCOREPRO, MSSQL$MICROSOFTBCM, MSSQL$MICROSOFTSMLBIZ, MSSQL$SONY_MEDIAMGR2, MSSQL$SQLEXPRESS, MSSQL$SQLSERVER2005, etc.
The files for this service may be installed a variety of different paths, which may include the MSSQL version number.
|
|
SQL Server Agent (MSSQLSERVER)
|
sqlagent.exe
|
Y
|
SQL Server Agent is a Microsoft Windows service that allows you to automate various MSSQL administrative tasks, which are called jobs. SQL Server Agent uses SQL Server to store job information. Jobs contain one or more job steps. Each step contains its own task, for example, backing up a database. SQL Server Agent can run a job on a schedule, in response to a specific event, or on demand. For example, if you want to back up all the company servers every weekday after hours, you can automate this task. Schedule the backup to run after 22:00 Monday through Friday; if the backup encounters a problem, SQL Server Agent can record the event and notify you. If you disable this service, then any scheduled MSSQL tasks will not run.
As such, you must start the SQL Server Agent (MSSQLSERVER) service before your local or multiserver administrative tasks can run automatically. SQL Server Agent runs as a service called SQL Server Agent (MSSQLSERVER), if it is the default instance, or SQLAgent$, if it is a named instance. IF MSSQL is installed as a named instance, its name will reflect the version of MSSQL being installed or the program that is using it. For example, other Service Names you may see include SQLAgent$SQLDEVELOPER, SQLAgent$SQLSERVER2008, SQLAgent$DEVELOPER2008, SQLAgent$AUTODESKVAULT, SQLAgent$MICROSOFTSMLBIZ, SQLAgent$PINNACLESYS, SQLAgent$SONY_MEDIAMGR, SQLAgent$VAIO_VEDB, SQLAgent$SQLEXPRESS, etc.
The files for this service may be installed a variety of different paths, which may include the MSSQL version number.
|
|
Image Converter video recording monitor for VAIO Entertainment
|
IcVzMon.exe
|
U
|
Part of the software suite bundled with Sony VAIO laptops.
|
|
WFPService
|
WFPService.exe
|
U
|
Added by Microsoft's Windows Feedback Program utility.
|
|
PowerAlert Port Manager Engine
|
portmgr.exe
|
Y
|
Added by the PowerAlert power management software by Tripp Lite. This service is required for PowerAlert to properly monitor UPS ports.
|
|
ScriptLogic Service
|
slClient.exe
|
Y
|
Part of the Desktop Authority administration program.
|
|
VideoAcceleratorService
|
videoacceleratorservice.exe
|
Y
|
Added by the SPEEDbit Video Accelerator video acceleration program.
|
|
MrHealthy
|
mrhealthy.exe
|
U
|
|
|
Kaspersky Anti-Virus 7.0
|
avp.exe
|
Y
|
Driver used by the Kaspersky Anti-Virus.
|
|
TabQuery Service
|
tabquery119.exe
|
X
|
Research indicates that this program is adware.
|
|
Portrait Displays Display Tune Service
|
DTSRVC.exe
|
U
|
This file is preinstalled on many computers, is in many monitor software packages, and is involved in adjusting monitor display settings by using a mouse instead of the monitor buttons. EzTune, MagicTune, ImageTune, and forteManager are just a few of the software products this file is found in. If using the monitor buttons is sufficient for you, you can disable the service. Unknown at this time if setting the service to manual would cause the program to not work.
|
|
Portrait Displays Display Tune Service
|
DTSRVC.exe
|
U
|
This file is preinstalled on many computers, is in many monitor software packages, and is involved in adjusting monitor display settings by using a mouse instead of the monitor buttons. EzTune, MagicTune, ImageTune, and forteManager are just a few of the software products this file is found in. If using the monitor buttons is sufficient for you, you can disable the service. Unknown at this time if setting the service to manual would cause the program to not work.
|
|
Portrait Displays Display Tune Service
|
dtsrvc.exe
|
U
|
This file is preinstalled on many computers, is in many monitor software packages, and is involved in adjusting monitor display settings by using a mouse instead of the monitor buttons. EzTune, MagicTune, ImageTune, and forteManager are just a few of the software products this file is found in. If using the monitor buttons is sufficient for you, you can disable the service. Unknown at this time if setting the service to manual would cause the program to not work.
|
|
PLFlash DeviceIoControl Service
|
IoctlSvc.exe
|
U
|
This file is an Input Output Control Service associated with a number of applications and file paths and generally detects the presence of flash drives or other memory devices using USB. Published by Prolific Technology Inc., this service can in many cases be disabled. However, there is indication that if you have an external hard-drive, this service is essential for communications to occur. Whether setting the service to manual would cause problems in this situation has not been determined.
|
|
PLFlash DeviceIoControl Service
|
IoctlSvc.exe
|
U
|
This file is an Input Output Control Service associated with a number of applications and file paths and generally detects the presence of flash drives or other memory devices using USB. Published by Prolific Technology Inc., this service can in many cases be disabled. However, there is indication that if you have an external hard-drive, this service is essential for communications to occur. Whether setting the service to manual would cause problems in this situation has not been determined.
|
|
ServiceLayer
|
ServiceLayer.exe
|
Y
|
This file is installed with Nokia's PC Suite, a program that enables connections and creates an interface between MS Windows computers and Nokia mobile devices. This file coordinates the communication among the different parts of this program.
|
|
Avira Premium Security Suite Scheduler
|
sched.exe
|
Y
|
This service manages the scheduled scans for the Avira Premium Security Suite antivirus program.
|
|
CamMonitor
|
uCamMonitor.exe
|
Y
|
This is the service file for ArcSoft Magic-i Visual Effects 2 HD made by Arcsoft, Inc. which is a webcam application used with video chat.
|
|
Plustek USB Scanner
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
USB Scanner
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
Genius USB Scanner
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
ColorPage-Vivid 4X
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
ColorPage-Vivid 4XE
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
GT680x Driver
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
ColorPage-Vivid 1200X
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
Flatbed Scanner
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
ColorPage-Slim 1200
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
USB Scanner Driver
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
BearPaw 2448TA Plus Usb Scanner
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
Diamond 2450 Usb Scanner
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
Grand Tech GT680x NT
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
GrandTechICNameNT
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
Visioneer OneTouch
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
ColorPage-Vivid 1200XE
|
Gt680x.sys
|
Y
|
This is driver for Scanners that use the Grand Tech GT680x chipset.
|
|
NICCONFIGSVC
|
nicconfigsvc.exe
|
Y
|
Service for various Internal Network Cards made by Dell, Inc. Involved with the power management.
|
|
GarenaPEngine
|
<random chars>.tmp
|
X
|
Unknown malware.
|
|
Ianno Web Cache Services
|
ianotife.exe
|
X
|
Identified by McAfee as a variant of the FakeAlert-PJ.gen malware.
|
|
System
|
sachost.exe
|
X
|
Identified by Kaspersky Antivirus as a variant of the Backdoor.Win32.Hupigon.atgu malware.
|
|
srvsysdriver32
|
sysdriver32.exe
|
X
|
Unknown malware. This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file.
|
|
wxpdrivers
|
svchost.exe
|
X
|
Unknown malware. This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file.
|
|
NVIDIA Update Service Daemon
|
daemonu.exe
|
N
|
Part of the display driver for Nvidia cards. The NVIDIA Settings Update Manager service is used to check new updates from NVIDIA's server.
|
|
NVIDIA Driver Helper Service
|
nvvsvc.exe
|
Y
|
Part of the display driver for Nvidia cards.
|
|
Intel PROSet Monitoring Service
|
IProsetMonitor.exe
|
Y
|
The Intel(R) PROSet Monitoring Service actively monitors changes to the system and updates affected network devices to keep them running in optimal condition. Stopping this service may negatively affect the performance of the network devices on the system.
|
|
AtherosSvc
|
adminservice.exe
|
Y
|
Atheros Bluetooth driver for motherboards with built-in Bluetooth.
|
|
ASUS System Control Service
|
AsSysCtrlService.exe
|
Y
|
Related to the Asus Motherboard Utilities.
|
|
ASUS HM Com Service
|
aaHMSvc.exe
|
Y
|
Related to the Asus Motherboard Utilities.
|
|
ASUS Com Service
|
atkexComSvc.exe
|
Y
|
Related to the Asus Motherboard Utilities.
|
|
Array Utility Service 8,4,0,353
|
arr_isrv.exe
|
U
|
|
|
Array SSL VPN Service 8,4,0,353
|
arr_srvs.exe
|
U
|
|
|
Adobe Acrobat Update Service
|
armsvc.exe
|
Y
|
Adobe Acrobat Updater keeps your Adobe software up to date. This program is not necessary to startup, but as there are frequent security updates for Adobe programs it is wise to keep this enabled so you are notified when a new update is available.
|
|
Adobe SwitchBoard
|
SwitchBoard.exe
|
Y
|
Adobe SwitchBoard is a process that facilitates communication between Bridge CS5 and the MiniBridge panel in Photoshop CS5 or InDesign CS5. This should be left set at Manual so it starts as needed.
|
|
Secunia PSI Agent
|
PSIA.exe
|
Y
|
Related to Secunia PSI. This service performs routine software inspections of the system, the results of which can be seen in your Secunia Customer Area account
|
|
Secunia Update Agent
|
sua.exe
|
Y
|
Related to Secunia PSI. This service performs routine software inspections of the system, the results of which can be seen in your Secunia Customer Area account
|
|
Local Account Authority Service
|
LocalAccountAuthority.bat
|
X
|
Related to the Virus.Win32.Virut.ce malware.
|
|
MouseDriver
|
MouseDriver.bat
|
X
|
Related to the Virus.Win32.Virut.ce malware.
|
|
Google Update Service (gupdatem)
|
GoogleUpdate.exe
|
N
|
This file is used by Google Chrome and other Google programs to check for updates.
|
|
CyService Service
|
cydll.dll
|
X
|
Added by the Backdoor.Murcy backdoor. Backdoor.Murcy is a Trojan horse that opens a back door on the compromised computer. Please note that C:\Windows\System32\svchost.exe is a legitimate program and should not be deleted.
|
|
lxdu_device
|
lxducoms.exe
|
Y
|
Added with the installation of various Lexmark Printers made by Lexmar International, Inc.
|
|
Windows Search
|
SearchIndexer.exe
|
U
|
This Microsoft file is part of the Windows Search Service installed with some Windows operating systems. It indexes files so you can find them faster. If you don't do extensive searching, you can safely disable this service. However, if you do a lot of searching, keep it enabled.
|
|
NICCONFIGSVC
|
nicconfigsvc.exe
|
Y
|
Service for various Internal Network Cards made by Dell, Inc. Involved with the power management.
|
|
ADSMService
|
ADSMSrv.exe
|
U
|
This file is the service for ASUS Data Security Manager made by ASUSTek Computer Inc. and may be preinstalled on some ASUS computers. This program is used to encrypt and store files. If you don't need to use this program, you may disable the service.
|
|
kmhfoot
|
kmhfoot.exe
|
X
|
Added by the Trojan.Dishigy Trojan.
|
|
Application Updater
|
ApplicationUpdater.exe
|
X
|
Adware made by Spigot Inc. which comes bundled with other software. For further information, read this detailed analysis of Spigot's applicationupdater.exe.
|
|
VirtualBox Guest Additions Service
|
VBoxService.exe
|
Y
|
Required for the guest services of VirtualBox to work properly.
|
|
winppdf
|
winppdf.exe
|
X
|
Added by the Troj/Mdrop-DBR Trojan.
|
|
winlogin save server
|
winlogin.scr
|
X
|
Added by the Mal/EncPk-VD malware.
|
|
Follower
|
fFollower.exe
|
X
|
Identified by Microsoft as a variant of the TrojanClicker:Win32/Delf.MB malware.
|
|
Rapport Management Service
|
RapportMgmtService.exe
|
Y
|
Added by the Trusteer Rapport security software. Rapport is a lightweight security software solution that protects web communication between enterprises, such as banks, and their customers and employees.
|
|
PowerPanel Personal Edition Service
|
ppped.exe
|
Y
|
Related to the CyberPower PowerPanel Personal edition monitoring and configuration program for CyberPower UPS devices.
|
|
smmservice
|
smmservice.exe
|
X
|
Added by the Defence Center rogue anti-spyware program.
|
|
Windows Disk Defender
|
windiskdefend.exe
|
X
|
Added by the Win7 AV rogue anti-spyware program.
|
|
Andrea ADI Filters Service
|
aeadisrv.exe
|
U
|
Preinstalled on certain ASUS computers and developed by Andrea Electronics Corporation, this file is included on Sound Max/SupremeFx Audio Card high definition audio CODEC and is used in noise filtering when using a microphone. Unless you use a microphone on your computer, you can disable this service.
|
|
Utility Mangserver
|
Utility Mang.exe
|
X
|
Added by the Mal/Kaukalo-A Trojan.
|
|
Hotclip Alert Mon
|
hotclipmon.exe
|
X
|
Added by the Troj/Dwnldr-IJP Trojan.
|
|
NTFS-Drivers
|
svchost.exe
|
X
|
Identified by Sophos as Mal/Generic-A. This infection should not be confused with the legitimate C:\Windows\System32\svchost.exe file.
|
|
Plug and Play
|
umpnpmgr.dll
|
Y
|
This service enables a computer to recognize and adapt to hardware changes with little or no user input. Stopping or disabling this service will result in system instability.
Please note that this service is launched by svchost.exe, but the actual application is what is listed as the filename.
|