Solved! Use NFAPI.DLL (Trojan Artemis) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

NFAPI.DLL – Trojan Artemis removal

File MD5 Virus Alias
NFAPI.DLL 598a3556a9740c9817fb2dc2e3ee1fee Trojan Artemis
NFAPI.DLL 598a3556a9740c9817fb2dc2e3ee1fee Adware – Unwanted Program

NFAPI.DLL size: 162304 bytes
NFAPI.DLL hash: 598A3556A9740C9817FB2DC2E3EE1FEE

Created files:

%Program Files%\filter2\1\driver_installer\downloadfile.vbs
%Program Files%\filter2\1\driver_installer\downloadsp.vbs
%Program Files%\filter2\1\driver_installer\driver\tdi\amd64\netfilter2.sys
%Program Files%\filter2\1\driver_installer\driver\tdi\i386\netfilter2.sys
%Program Files%\filter2\1\driver_installer\driver\wfp\windows7\amd64\netfilter2.sys
%Program Files%\filter2\1\driver_installer\driver\wfp\windows7\i386\netfilter2.sys
%Program Files%\filter2\1\driver_installer\driver\wfp\windows8\amd64\netfilter2.sys
%Program Files%\filter2\1\driver_installer\driver\wfp\windows8\i386\netfilter2.sys
%Program Files%\filter2\1\driver_installer\driver_installer.exe
%Program Files%\filter2\1\driver_installer\win32\nfapi.dll
%Program Files%\filter2\1\driver_installer\win32\nfregdrv.exe
%Program Files%\filter2\1\driver_installer\Windows6.0-KB2763674-x64.msu
%Program Files%\filter2\1\driver_installer\Windows6.0-KB2763674-x86.msu
%Program Files%\filter2\1\driver_installer\x64\nfapi.dll
%Program Files%\filter2\1\driver_installer\x64\nfregdrv.exe
%Program Files%\filter2\2\CppWindowsService.exe
%Program Files%\filter2\2\driver_installer.exe
%Program Files%\filter2\2\libeay32.dll
%Program Files%\filter2\2\nfapi.dll
%Program Files%\filter2\2\nss\certutil.exe
%Program Files%\filter2\2\nss\mozcrt19.dll
%Program Files%\filter2\2\nss\nspr4.dll
%Program Files%\filter2\2\nss\nss3.dll
%Program Files%\filter2\2\nss\plc4.dll
%Program Files%\filter2\2\nss\plds4.dll
%Program Files%\filter2\2\nss\smime3.dll
%Program Files%\filter2\2\nss\softokn3.dll
%Program Files%\filter2\2\PFHttpContentFilter.exe
%Program Files%\filter2\2\ProtocolFilters.dll
%Program Files%\filter2\2\ssleay32.dll

Detected by UnHackMe:

NFAPI.DLL
Default location: %PROGRAM FILES%\FILTER2\1\DRIVER_INSTALLER\X64\NFAPI.DLL

Dropper information:
MD5: 288dc97d103ee0e76f54039768e2039d
File size: 3176000 bytes

Leave a Reply