Free virus removal tool to remove RVHOST.exe

• RVHOST.exe is a trojan that may reprensent security risk for your system, it runs in the background, this application allows remote access to the compromised system.
• Downloads other files from Internet.
• Creates a startup registry entry.
• Removes the value of Shell under Winlogon

To remove RVHOST.exe

• Download this free removal tool for RVHOST.exe
• Extract it
• Launch
• Click on the delete button

RVHOST.exe will be removed from your system in 10s. Restart your computer when it’s finished.

Alias :

• Malware.Imaut [PCTools]
• W32.Imaut.N [Symantec]
• Worm.Win32.AutoRun.fwl [Kaspersky Lab]
• W32/YahLover.worm.gen [McAfee]
• WORM_IMAUT.E [Trend Micro]
• W32/SillyFDC-G [Sophos]
• Worm:Win32/Nuqel.A [Microsoft]

Processes :

• RVHOST.exe

Files :

• %Windows%\RVHOST.exe
• %System%\RVHOST.exe

Registry

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  • NofolderOptions = 0x00000001
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
  • DisableTaskMgr = 0x00000001
  • DisableRegistryTools = 0x00000001
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  • Yahoo Messengger = "%System%\RVHOST.exe"

This virus removes also the value of Shell under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Don't worry, this removal tool restores all these parameters.