FASTNS32.EXE is Worm Dorkbot

December 29, 2011 by NightWatcher
Filed under: Worm 
: Solved!

You should Download Removal Tool here...

The file FASTNS32.EXE is a computer worm.
The worm FASTNS32.EXE is a self-replicating malicious program,
which uses a computer network to send copies of itself to other computers.
You must fix the FASTNS32.EXE problem as soon as possible!
Delete the file FASTNS32.EXE from all infected computers in your network.
Set up your network firewall against FASTNS32.EXE intervention.

Malware Analysis of FASTNS32.EXE
Full path on a computer: %Appdata%\fastns32.exe

Detected by UnHackMe:

Item Name: fastcs
Author: Unknown
Related File: %APPDATA%\FASTNS32.EXE
Type: Registry Run

Item Name: fastns32.exe
Author: Unknown
Related File: %APPDATA%\FASTNS32.EXE
Type: Detected using Heuristic Algorithm

Removal Results: Success
Number of reboot: 1

FASTNS32.EXE is known as:

Worm.Dorkbot

FASTNS32.EXE hash:

  • MD5: 225D20E372FB72AC6CA6C4E1EAFABC6A
How to quickly detect FASTNS32.EXE presence? 

Registry:
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\fastcs: “%Appdata%\fastns32.exe”
Files:
  • %Appdata%\fastns32.exe


Recommended: UnHackMe anti-rootkit and anti-malware

Premium software: RegRun Security Suite (Good choice for removal and protection)

Written by

Malware Hunter.

Comments

Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!

You must be logged in to post a comment.