About “Termserv.dll Patcher (PUA)” infection

The Termserv.dll Patcher (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Termserv.dll Patcher (PUA) virus can do?

Presents an Authenticode digital signature
Unconventionial language used in binary resources: Chinese (Simplified)

How to determine Termserv.dll Patcher (PUA)?


File Info:
crc32: 82FC5EA9
md5: 0546abe6293ba40348e1734fafca47ec
name: 0546ABE6293BA40348E1734FAFCA47EC.mlw
sha1: 37c0d892b38bbf9d8c6a8d35db5b32555cb758c8
sha256: 5161cdafd0c6d79616d775f79214b2e7e3ad13de71db63e9fa6bfc448ba4084b
sha512: 125e805e0461d1582a5b385b6c61e09f833d6464eaa23312ce7146207262f6d3d347f1ddc60bc38c1beadc479fc54dee55a4423f7991f8b163b92e3c551df265
ssdeep: 1536:IZkXc3jjpQkmlt2niKNqOxrSuUnnI04By5Nv3+dV:IZkXc3jje2xtr3UnnI0Yy33+3
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright (C) deepxw 2008-2009.  All rights reserved.
InternalName: UniversalTermsrvPatch.exe
FileVersion: 1.0.0.5
CompanyName: deepxw
Comments: Crack termsrv.dll, remove the Concurrent Remote Desktop sessions limit.
ProductName: Universal termsrv.dll Patch
ProductVersion: 1.0.0.5
FileDescription: Universal termsrv.dll Patch
OriginalFilename: UniversalTermsrvPatch.exe
Translation: 0x0000 0x04e4

Termserv.dll Patcher (PUA) also known as:

DrWeb	Program.TermSrvPatch
Cylance	Unsafe
TrendMicro	HackTool.Win64.TermsrvPatch.GA
ClamAV	Win.Trojan.Agent-6300169-0
GData	Win64.Riskware.Termsrv.QX7MRX
Sophos	Termserv.dll Patcher (PUA)
Comodo	ApplicUnwnt@#1g2pk6l4mp1pu
McAfee-GW-Edition	HTool-TermServ
Endgame	malicious (high confidence)
eGambit	Unsafe.AI_Score_94%
Antiy-AVL	Trojan[RemoteAdmin]/Win32.WinVNC
Microsoft	PUA:Win32/Creprote
AegisLab	Riskware.Win32.Generic.1!c
McAfee	HTool-TermServ
Malwarebytes	RiskWare.Tool.HCK
TrendMicro-HouseCall	HackTool.Win64.TermsrvPatch.GA
Rising	Malware.Undefined!8.C (CLOUD)
Fortinet	W32/Fareit.A

How to remove Termserv.dll Patcher (PUA)?

Termserv.dll Patcher (PUA) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X