Win32.ServU-based Trojan

Win32.ServU-based is known to be a backdoor Trojan program.  It uses such mediums as e-mail, shareware and freeware sites, Internet Relay Chat and Peer-to-Peer programs to find its way onto your computer.  If you have the misfortune of being infected with this malware, you will encounter such things as an extremely slow computer, possible disabling of security software and even a complete loss of control of your PC.  Win32.ServU-based gains entry and will open a random port to communicate with its author.  This pest came onto the scene in March of 2005.

AKA:
Backdoor.Win32.ServU-based
Backdoor:Win32/ServUbased.AH
Win32.ServU-based.ap
Win32.ServU-based.bj

Related Files:
svchost1.exe

Category:
Backdoor Trojan

Recommended Action:
Remove at once.
To remove Win32.ServU-based manually, you must kill this process:
svchost1.exe

Delete these registry entries:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ssdpcl
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ssdpcl\0000
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_ssdpcl\0000\control
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssdpcl
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssdpcl\enum
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssdpcl\security

Finally, delete this file:
svchost1.exe

If you are interested in protecting your PC from further damage, then you might want to invest in an anti-spyware system that is designed to eliminate spyware but also keep you immunized from further infection.  You need not look further than ZookaWare PC Cleaner.   ZookaWare PC Cleaner has been eradicating spyware for many years with great success.  Garnering numerous awards and receiving rave reviews from customers, you can’t go wrong with ZookaWare PC Cleaner.

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Giuliano Mori says:

    I had Win32.ServU-based on my computer and I was able to remove it with SpyZooka. Thank you!

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php