Categories: Malware

Win32/ServStart.DD removal instruction

The Win32/ServStart.DD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/ServStart.DD virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Drops a binary and executes it
Uses Windows utilities for basic functionality
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

apple.vzboot.com

How to determine Win32/ServStart.DD?


File Info:
crc32: CEB4AC19md5: c71eacf3ffaf82787a533eb452bcf3e7name: c.exesha1: c9149fdc1eacf2c61e606050d5d3e82284578ffbsha256: 927d0f45bf59f19e915b8a8807372f547d151b60455a7fe40f696b8742d3ae3asha512: 26c9deb31071f1606b2eb8c09e3c1ea761701be0c8ba99673986abd44bb42affb9e8787e46059a277e9c2e40827f3619cbeaf39fefdedeb20a2a4e6925ca815essdeep: 1536:GRtxXnig5/VUJyWryEXe8T1g6hypxc/lkJ5jj1fV8cGDmtw:GhN5/VmbTC6hyQ/OJRj1V8cGCtwtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/ServStart.DD also known as:

Bkav	W32.DefayliLTAD.Trojan
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Malware.gqW@aK8ldHk
FireEye	Generic.mg.c71eacf3ffaf8278
CAT-QuickHeal	Trojan.Malex.E4
McAfee	DoS-FAE!C71EACF3FFAF
Cylance	Unsafe
Zillya	Trojan.ServStart.Win32.2090
AegisLab	Trojan.Win32.Reconyc.toaz
Sangfor	Malware
K7AntiVirus	Trojan ( 0055e40a1 )
BitDefender	Gen:Trojan.Malware.gqW@aK8ldHk
K7GW	Trojan ( 0055e40a1 )
Cybereason	malicious.3ffaf8
TrendMicro	TROJ_SERVSTART.SMB
Baidu	Win32.Trojan.Swisyn.d
Cyren	W32/NewMalware-Rootkit-I-based!
Symantec	SMG.Heur!gen
TotalDefense	Win32/Tnega.ANZWCeC
APEX	Malicious
Avast	Win32:Nitol-B [Trj]
ClamAV	Win.Trojan.Gh0stRAT-7480037-0
Kaspersky	Trojan.Win32.Reconyc.fuzv
Alibaba	Trojan:Win32/Reconyc.175cba6e
NANO-Antivirus	Trojan.Win32.Swisyn.cteraq
ViRobot	Trojan.Win32.DDoS-Agent.98304.A
Ad-Aware	Gen:Trojan.Malware.gqW@aK8ldHk
Emsisoft	Trojan.ServStart (A)
Comodo	TrojWare.Win32.Malex.EQ@5tewhp
F-Secure	Worm.WORM/Rbot.Gen
DrWeb	Trojan.Inject1.29007
VIPRE	Trojan.Win32.Generic!BT
Invincea	Mal/Generic-R + Troj/Sdbot-DQA
McAfee-GW-Edition	DoS-FAE!C71EACF3FFAF
Sophos	Troj/Sdbot-DQA
Ikarus	Backdoor.Win32.Farfli
Jiangmin	Trojan/Swisyn.wmy
Webroot	W32.Malware.Gen
Avira	WORM/Rbot.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Unknown
Microsoft	Trojan:Win32/Malex.gen!E
Arcabit	Trojan.Malware.E30E85
SUPERAntiSpyware	Trojan.Agent/Gen-ServStart
ZoneAlarm	Trojan.Win32.Reconyc.fuzv
GData	Gen:Trojan.Malware.gqW@aK8ldHk
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Bagsu.R175660
VBA32	BScope.Trojan.Downloader
ALYac	Trojan.Agent.ServStart
TACHYON	Trojan/W32.Swisyn.98304.AO
Malwarebytes	Trojan.ServStart
Panda	Generic Malware
ESET-NOD32	Win32/ServStart.DD
TrendMicro-HouseCall	TROJ_SERVSTART.SMB
Rising	Backdoor.Jusi2!1.9DB2 (CLASSIC)
Yandex	Trojan.ServStart!1cgk/h5vYpM
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/ServStart.DD!tr
BitDefenderTheta	Gen:NN.ZexaF.34570.gqW@aK8ldHk
AVG	Win32:Nitol-B [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.Reconyc.B