How to remove RVHOST Virus / Malware

Do not think of using Symantec anti-virus to clean this. It has been categorized as malware.

RVHOST virus will change few of your Windows Registry.


1. Delete RVHOST.exe


– In Windows Folder.

– In Windows\System32 folder


2. Delete C:\Windows\Tasks\At1.job.


3. Delete all “new folder.exe” that size 25,177KB

4. Regain the RegEdit and TaskManager.


Create a file save as regain.vbs.


The content as follow.


On Error Resume Next

Set shl = CreateObject(“WScript.Shell”)

Set fso = CreateObject(“scripting.FileSystemObject”)

Shl.RegDelete “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools”

Shl.RegDelete “HKEY_CURRENT_USER\Software\Microsoft\Windows\Current\Version\Policies\System\DisableTaskMgr”



5. Double click to rerun the vbs file.


6. Run Regedit 


In the left panel, double-click the following:


Delete the entry:

Yahoo Messengger = “%System%RVHOST.exe”



Delete the entry:

NofolderOptions = “1”


HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>CurrentVersion>Winlogon

Locate the entry:

Shell = “Explorer.exe RVHOST.exe”

Right-click on the value name and choose Modify. Change the value data of this entry to:

Shell = “Explorer.exe”





Locate the entry:

NextAtJobId = “2”

Right-click on the value name and choose Modify. Change the value data of this entry to:

NextAtJobId = “1”

About chanmingman

Since March 2011 Microsoft Live Spaces migrated to Wordpress ( till now, I have is over 1 million viewers. This blog is about more than 50% telling you how to resolve error messages, especial for Microsoft products. The blog also has a lot of guidance teaching you how to get stated certain Microsoft technologies. The blog also uses as a help to keep my memory. The blog is never meant to give people consulting services or silver bullet solutions. It is a contribution to the community. Thanks for your support over the years. Ming Man is Microsoft MVP since year 2006. He is a software development manager for a multinational company. With 25 years of experience in the IT field, he has developed system using Clipper, COBOL, VB5, VB6, VB.NET, Java and C #. He has been using Visual Studio (.NET) since the Beta back in year 2000. He and the team have developed many projects using .NET platform such as SCM, and HR based applications. He is familiar with the N-Tier design of business application and is also an expert with database experience in MS SQL, Oracle and AS 400.
This entry was posted in Community and tagged , , . Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s