Troj/ServU-AS

Aliases	Backdoor.Win32.ServU-based
Category	Viruses and Spyware
Type	Trojan
What to do	If you've received an alert for a virus or spyware, then follow the instructions for removing the threat.
Prevalence	low high

Summary


Affected operating systems	Windows
Included in our products from	December 2005 (4.00)
Protection available since	5 May 2005 07:34:11 (GMT)
Last updated	24 October 2005 22:13:32 (GMT)
Detected by	All Sophos products

Troj/ServU-AS is a hacked version of a commercially available FTP server that will listen on a port for incoming commands from a remote attacker.

Troj/ServU-AS creates text files named chkdrv.vxd and tskman.dll in the current folder.

Get reports about the latest virus and spyware threats delivered to your computer