Manual Removal of Fvprotect.exe

Fvprotect.exe (Netsky.P worm)
fvprotect.exe is considered to be a security risk, not only because antivirus programs flag Netsky.P worm as a virus, but also because a number of users have complained about its performance.
Netsky.P worm is likely a virus and as such, presents a serious vulnerability which should be fixed immediately! Delaying the removal of fvprotect.exe may cause serious harm to your system and will likely cause a number of problems, such as slow performance, loss of data or leaking private information to websites.

Try Symantec Auto Removal Tool for Fvprotect.exe (Netsky.P worm/W32.Erkez)
Damage Level: Medium
Distribution Level: Medium


Manual Removal Instructions
Recommend Removal from Safe Mode:
How to Start in Safe mode:
Restart your Computer, Press F8 when your Screen turns on, Select Safe mode, press enter.

The Infected Files Can be Seen in these folders and names
It copies itself to the following location:
   • %WINDIR%\fvprotect.exe

The following files are created:

Terminate the FVPROTECT.EXE process using Windows Task Manager.
Delete the following files from your Windows directory (typically c:\windows or c:\winnt):

• FVPROTECT.EXE
• USERCONFIG9X.DLL
• BASE64.TMP
• ZIP1.TMP
• ZIP2.TMP
• ZIP3.TMP
• ZIPPED.TMP
  
  
  • Delete the many copies of the worm dropped on the victim machine, with the enticing file names as described above.

%WINDIR%\userconfig9x.dll
Further investigation pointed out that this file is malware, too.


Search registry for the above File name and remove,
Click Start; Run,Type regedit,then click OK.


The following registry keys are created:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Norton Antivirus AV" = %WinDir%\FVProtect.exe

Delete the "Norton Antivirus AV" value from
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Search Registry for the above exe files, and remove the Registry entries.
Reboot the system


Recommended Removal Tools:
Kaspersky Antivirus or Internet Security (Shareware)
Spyware Doctor (Shareware)
AVG Antivirus (Freeware)
Symantec (Shareware)

Hijackthis (Freeware)