wintftp.exe - Dangerous
wintftp.exe
Manual removal instructions:
Antivirus Report of wintftp.exe:
wintftp.exe
W32/Sdbot-KE is a network worm and backdoor for the Windows platform.
The backdoor component allows a malicious user remote access to an infected computer via IRC.
The worm spreads by exploiting network shares with weak passwords.
W32/Sdbot-KE copies itself to wintftp.exe in the system folder on remote computers and runs the copy.
Manual removal:
Locate the HKEY_LOCAL_MACHINE entries:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
and delete the value:
Win FTP = wintftp.exe
| wintftp.exe | Malware |
| wintftp.exe | Dangerous |
| wintftp.exe | High Risk |
The backdoor component allows a malicious user remote access to an infected computer via IRC.
The worm spreads by exploiting network shares with weak passwords.
W32/Sdbot-KE copies itself to wintftp.exe in the system folder on remote computers and runs the copy.
Manual removal:
Locate the HKEY_LOCAL_MACHINE entries:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
and delete the value:
Win FTP = wintftp.exe
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.