Solved! Use FTP32.EXE (Worm Vobfus) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

FTP32.EXE – Worm Vobfus removal

File MD5 Virus Alias
FTP32.EXE 6b59a87b38f6db40bb7a78f2f13c9610 Worm Vobfus
FTP32.EXE 6b59a87b38f6db40bb7a78f2f13c9610 Trojan (Suspicious File)
FTP32.EXE 6b59a87b38f6db40bb7a78f2f13c9610 Trojan Artemis
FTP32.EXE 6b59a87b38f6db40bb7a78f2f13c9610 Trojan JboxGeneric
FTP32.EXE 6b59a87b38f6db40bb7a78f2f13c9610 Trojan Jbox
FTP32.EXE 6b59a87b38f6db40bb7a78f2f13c9610 Worm Autorun

FTP32.EXE size: 245760 bytes
FTP32.EXE hash: 6B59A87B38F6DB40BB7A78F2F13C9610

Created files:

%WinDir%\ftp32.exe
%WinDir%\ntdtcstp.dll

Autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ftp32: %WinDir%\ftp32.exe

Detected by UnHackMe:

FTP32.EXE
Default location: %WinDir%\FTP32.EXE

Dropper information:
MD5: 6b59a87b38f6db40bb7a78f2f13c9610
File size: 245760 bytes

Leave a Reply