How to Remove the RVHOST.exe Virus

Computers are amazing tools for organizing our work, creating videos, watching DVDs and typing book reports. However, there are a few downfalls to the systems. Despite online firewall protection and other defenses computers have, there is always a chance they can become infected with a virus like the RVHOST.exe virus. RVHOST.exe can copy data from a computer and send it to other computers via the Internet. It can open websites without the user knowing and initiate unwanted programs at startup.

Instructions

1. Click "My Computer."

2. Select the "Windows" Folder.

3. Select "System32."

4. Delete files "C:\\Windows\System32\RVHOST.exe", "c:\windows\system32\rvhost.exe", "%alldrivers%\newfoler.exe", and "C:\\Windows\Tasks\At1.job" if they exist.

5. Open Notepad.

6. Copy and paste or type the follow message:

   On Error Resume Next
   Set shl = CreateObject("WScript.Shell")
   Set fso = CreateObject("scripting.FileSystemObject...
   shl.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Wi... entVersion\Policies\System\DisableRegist...
   shl.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Wi... entVersion\Policies\System\DisableTaskMg...
   shl.RegDelete

7. Save the file and name it "Enable.VBS."

8. Double-click your new file "Enable.VBS."

9. Click Start and select "Run."

10. Type: regedit.

11. Double click "HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Run"

12. Delete the follow (if present) when the selections appear:

    "%Systems%RVHOST.exe"

13. Stay in the same location. Double click the following which will be in the left panel: "HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>...NT>
    CurrentVersion>Policies>Explorer."

14. On the right panel find "NoFolderOptions="1'' and delete it.

15. Go back to the left side panel and click: "HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>... NT>CurrentVersion>Winlogon"

16. Find the file name "Shell = Explorer.exe RVHOST.exe"'.

17. Select the value name and choose 'Modify' when the menu appears.

18. Change the value to "Explorer.exe."

19. Double click :
    "HKEY_LOCAL_MACHINE>SYSTEM>CurrentContr...Services>Schedule"

    which is on the left side of the screen.

20. On the right find file: "NextAtJobld="2".

21. Select the value name and when the options menu comes up select "Modify."

22. Change the value to "1" and close the registry editor.

23. Restart your computer.

Tips & Warnings

• Ridding your computer of this bug can be a little tedious, when deleting the unwanted files, make sure they are similar the files stated above. You do not want to accidentally delete the wrong files.