Trojan.Win32.ServStart.vho information

Malware Removal

The Trojan.Win32.ServStart.vho is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

ribbon

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
THANK YOU!
DOWNLOAD NOW
On Going Offer

What Trojan.Win32.ServStart.vho virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Presents an Authenticode digital signature
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

How to determine Trojan.Win32.ServStart.vho?


File Info:

crc32: 15CE2A8F
md5: e340516631f1b9a8780c09bad6edead4
name: svchost.exe
sha1: 3839c39f977f88719e423358453c2e9a24efa4eb
sha256: 6edf2cafd33a313e15cd7e333c35ab1a2c35f135786c0eaefdf993ddaf47a15e
sha512: 2beac2c29e0dbe008e3c4a166694beb8038e98f5e2812429804949a720a4164ae986d522988166a7e37c5c7af61456385b5615fc2bf5a963607304094924e1df
ssdeep: 6144:p6SYwYmM7+hGT1B1yrAnZC/lasqIcBZxa264uSPK76Ea:phE1B1ugZC/lpSzY2BfZv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Windowsx7f51x7edcx8f85x52a9x529fx80fdx63d2x4ef6
InternalName: Windowsx7f51x7edcx8f85x52a9x529fx80fdx63d2x4ef6
FileVersion: 1.0.0.1
CompanyName: Windowsx7f51x7edcx8f85x52a9x529fx80fdx63d2x4ef6
ProductName: Windowsx7f51x7edcx8f85x52a9x529fx80fdx63d2x4ef6
ProductVersion: 1.0.0.1
FileDescription: Windows Server
OriginalFilename: Windowsx7f51x7edcx8f85x52a9x529fx80fdx63d2x4ef6
Translation: 0x040c 0x04e4

Trojan.Win32.ServStart.vho also known as:

MicroWorld-eScanTrojan.Cud.Gen.1
FireEyeTrojan.Cud.Gen.1
CAT-QuickHealTrojan.ServstartRI.S10996511
McAfeeGenericRXAA-AA!E340516631F1
CylanceUnsafe
K7AntiVirusTrojan-Downloader ( 00560bad1 )
BitDefenderTrojan.Cud.Gen.1
K7GWTrojan-Downloader ( 00560bad1 )
BaiduWin32.Trojan-Downloader.Agent.cw
F-ProtW32/Agent.BOR.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:DropperX-gen [Drp]
GDataTrojan.Cud.Gen.1
KasperskyHEUR:Trojan.Win32.ServStart.vho
NANO-AntivirusTrojan.Win32.ServStart.ginthm
Endgamemalicious (high confidence)
SophosMal/Agent-AUY
F-SecureHeuristic.HEUR/AGEN.1046092
DrWebTrojan.DownLoader32.46379
Trapminesuspicious.low.ml.score
EmsisoftTrojan.Cud.Gen.1 (B)
IkarusTrojan-Downloader.Win32.Agent
CyrenW32/Agent.BOR.gen!Eldorado
JiangminTrojan.ServStart.acb
AviraHEUR/AGEN.1046092
MAXmalware (ai score=84)
ArcabitTrojan.Cud.Gen.1
ZoneAlarmHEUR:Trojan.Win32.ServStart.vho
MicrosoftTrojanDownloader:Win32/Small.gen!AP
AhnLab-V3Malware/Win32.RL_Generic.R325188
Acronissuspicious
VBA32BScope.TrojanDownloader.Agent
Ad-AwareTrojan.Cud.Gen.1
MalwarebytesBackdoor.Farfli
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.EUJ
RisingDownloader.Agent!8.B23 (TFE:5:ZAfQvTBkCwJ)
SentinelOneDFI – Suspicious PE
eGambitPE.Heur.InvalidSig
FortinetW32/Agent.EUJ!tr.dldr
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.631f1b
Qihoo-360Win32/Trojan.613

How to remove Trojan.Win32.ServStart.vho?

Trojan.Win32.ServStart.vho removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment