Remove RVHOST.EXE Virus!
RVHOST.EXE is a dangerous virus. It will spread itself all over your computer and your local area network. It will also copy itself into thumbdrive and spread it to other people.
If you see this process running, you are in big trouble. But dont worry i got a solution here that will remove the virus away from your computer.
This malware is known as Nuqel.A
How to remove RVHOST.EXE?
Delete these files if they exist:
C:\WINDOWS\SYSTEM32\RVHOST.exe
c:\windows\rvhost.exe
%all drives%\new folder.exe
C:\Windows\Tasks\At1.job
Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run in the registry, and you need delete the entries which contain RVHOST.exe in them, or better yet, change them back to their appropriate paths.
Go to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System
“DisableTaskManager” = 1 (CHANGE IT TO 0 )
“DisableRegistryTools” = 1 (CHANGE IT TO 0 )
Go to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
“nofolderoptions” = 1 (CHANGE IT TO 0)
Go to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Schedule
“attaskmaxhours” = 0 (CHANGE IT TO 24)
You shouldn’t continue to get this threat once it’s deleted, unless you come into contact with it again. May I suggest using caution with flash drives, and dont open things that you are unsure about.
Delete these files if they exist:
C:\WINDOWS\SYSTEM32\RVHOST.exe
c:\windows\rvhost.exe
%all drives%\new folder.exe
C:\Windows\Tasks\At1.job
Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run in the registry, and you need delete the entries which contain RVHOST.exe in them, or better yet, change them back to their appropriate paths.
Go to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System
“DisableTaskManager” = 1 (CHANGE IT TO 0 )
“DisableRegistryTools” = 1 (CHANGE IT TO 0 )
Go to:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
“nofolderoptions” = 1 (CHANGE IT TO 0)
Go to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\Schedule
“attaskmaxhours” = 0 (CHANGE IT TO 24)
If you need help removing this virus, please drop me a message here. I will be glad to help out.
Popularity: 39%
how to access the HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System and other related HKEY_CURRENT_USER registry?
Download Spyware Doctor from my website. Use Spyware Doctor to clean the virus and other spywares.
Thanks for a good solution from RVHOST.exe
that is a great idea which you have put in the website.
THANKS
regards
asif
CHEERS MATE!
My Profound Thanks to you and this guide. Truly, a laboratory facilitator like me comes face to face with these threats almost everyday. I’ve been looking for a manual solution to such a bothersome task and as “bothersome” as it may seem, it really is worthwhile.
My sincerest gratitude to you and much love from the Philippines.
The fount of knowledge is given freely lest it die with out being applied or for others to appreciate its worth!
More power to you and your site (+bookmarked!).
Carl Joseph D. Gabriel
STI Mobile School
Facilitator
Cagayan de Oro City
Mindanao, Philippines
9000
glad to help you guys out~ cheers!
Hi! Thanks so much for the infor. I followed all the steps but I cannot get rid of the pop up error message “There is no disk in the drive. Please insert a disk into drive\Device\Harddisk1\DR3″ Whenever I try to close ir or cancel it, it does not go away. Please help..
thanks for the solutions. the rvhost.exe wont come out after do all the step provided. but there is one problem regarding the new folder.exe, once i share a folder, inside the folder will still auto create the new folder.exe application and all my folder inside my share folder will all auto create a same name .exe application. so, got any solution for this.. thanks
new folder.exe virus still exist, you need to disable the virus using msconfig or hijackthis
ok. thanks for the info.
sorry. my problem still not fixed yet.. the new folder.exe still occur and the rvhost.exe came out again. n i try using hijackthis or msconfig but i not sure wat should i do..
you are the man
thanks a lot
plz elaborate.. how can i explore the like this??? huhu! i really dont wnat virus! /:<
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System
“DisableTaskManager” = 1 (CHANGE IT TO 0 )
“DisableRegistryTools = 1 (CHANGE IT TO 0 )
how to remove RVHOST automatically
Download Perfect Optimizer Perfect Optimizer
It will fix your problem automatically.