Threat Description



Aliases: Riskware:W32/ServU, Server-FTP.Win32.Serv-U.gen, Riskware:W32/ServU.D
Category: Malware
Type: Riskware
Platform: W32


Useful, legitimate software which could possibly be misused for malicious purposes.


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.


Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.

Technical Details

Programs designated as 'riskware' are not generally malicious by design or intent. These programs can however be abused by users or other programs to accomplish malicious activities. This detection identifies a program that is designed to serve as a File Transfer Protocol (FTP) server, based on a widely used file transfer protocol for moving files over a network. As the program facilitates transfer of files to and from a machine, it can be abused to function as an unauthorized backdoor. During installation and operation, this program does not make any noticeable system changes. It does however create and listen for incoming network connections, in order to make file transactions possible. A typical port the program will listen to is 43958.


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More