Please note that version 6 of F-PROT Antivirus for Windows has been released. We recommend that all Home, Corporate and Mail Server users of version 3 of F-PROT Antivirus for Windows upgrade their program to the newest version as soon as possible.

• If you have Windows XP you should make a copy of the registry before proceeding. For further information, please browse Microsoft's Support Center.
• The name of the malware involved can vary in each infection. The name in the following instructions is tapikey.dll

Steps in removing Agent:

1. Download Process Explorer from Sysinternals.com

Sysinternals: Process Explorer

Save and close all running programs, including Internet Explorer. We recommend that you either print out these removal instructions before proceeding or download and run Firefox or Opera browser run view these removal instructions.

2. Run Process Explorer and "Regedit" (Start -> Run.. -> Write Regedit and press "OK")



3. Find the Explorer.exe process in the Process Explorer program and kill it by right-clicking it and select "Kill Process". Select "Yes" to confirm.



Find the Winlogon.exe process and right-click on it to select "Properties". Select "Threads", choose the file name that applies (it is very likely that you will find several such lines and therefore it is a good idea to alphabetize the list by selecting "Start Address"), press the "Kill" switch for each line and choose "Yes". If the file name is not found in the list you need to restart the computer and start again from step 1.



4. Select the "Regedit" window, choose the HKEY_LOCAL_MACHINE key, select "Edit" and "Find". Write the appropriate file name.



Repeat this step until you have reached the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

There you should delete the "DllName" line.


5. Restart your computer with Process Explorer (File -> Shutdown -> Restart, and choose "Yes")



6. Scan your computer with F-PROT Antivirus and the malware should be deleted. If you are unable to delete the malware you may need to repeat this process.

If you have Windows ME or Windows XP you need to follow these instructions when you are done.