I-Worm.Netsky.m worm spreads via the Internet as an attachment to infected messages. ?he worm scans all disks for files with the predefined extensions and sends copies of itself to email addresses harvested from these files. ?opies itself to the Windows directory as Avprotect9x.exe. The worm opens a group of several ports. The port numbers are increased incrementally across the whole group every few seconds.
Manual removal: Find and delete the key in the system registry: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run:] 9xHtProtect = \AVprotect9x.exe