EasyServ Description

EasyServ is a backdoor trojan that gives an attacker unauthorized remote access to a compromised computer. The threat runs a web server that shows the directory structure of any specified local hard drive. The intruder can steal any file using a web-based interface. EasyServ automatically runs on every Windows startup.

Type: Backdoors

How Can You Detect EasyServ?

EasyServ has typically the following processes in memory:

• server.exe

EasyServ creates the following registry entries:

• HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRuneasyserv

Important Article Disclaimer