RVHOST.exe

shinkansen2005

ok... dah settle...
guna portable anti virus..
dah ilang...

cloud_hardcore

korang guna portable AV ni brand pe?
hehehe jgn ckp adidas dah ar...

kmkd

portable antivirus ni rasanya mesti yang dari www.data0.net kan? yang tu act versi lama.. 1.5 rasanya.. sekarang ada yang versi beta.. 1.6...

Mehacomp_91

dah nak keluar yang baru ya meha lama dah tunggu benda ni betul cakap kmkd portable AV ni memang berkesan cuma dia dah lama tak update yang tak best tu

kmkd

benda ni bukan kmkd punya la.. ramai buat av baru di malaysia ni meha.. tap link kmkd tak ingat.. nanti rajin kmkd bagi ek..

skymania

korunk!!PC aku plak kene menatang rvhost neh...kalu donlod portable tuh ok tak??

aku dah delete file rvhost tuh..tp tak jalan pon..

skymania

korunk!!~~ aku still takleh buang lgk RVHOST neh...pendrive takleh ejek..kuar jeh menatang RVHOST neh..

tp file die aku dah delete...aku jmpe kat C..pastu aku dah pakai portable AV scan..die kata takde virus.. cleanup pon aku pakai..kata takde gak..

camner nih.......

skymania

adakah perlu untuk aku clean kan menatang nih dr safemode ???

skymania

task manager pon takleh bukak...

bzzts

49# skymania

ko donlod SERGIWA RRT tools ni : http://www.sergiwa.com/modules/news/




trial je, takpe. nnt ko check box yg ko nak tu, then klik "remove".



aku rasa tu aje kot. pastu RVHOST tu ko bleh guna hijackthis atau lelain tools untuk buang...

skymania

50# bzzts

ok!~~aku terai..arap nih la pilihan tepat tuk removed...

skymania

50# bzzts

aku tak sure dah ilang ker blom..tp kan..tiap kali aku nak bukak my komputer atau my document..sker kuat mende neh..apa mende neh ek?? pasal RVHOST neh ker??

tak paham la..

bzzts

ko tick kotak NO SEARCH tak?
kalo ada, maknanya windows nak re-configure SEARCH kat windows explorer la tu.

skrg ni task manager, regedit, smua dah leh pakai la kan?

skymania

ko tick kotak NO SEARCH tak?
kalo ada, maknanya windows nak re-configure SEARCH kat windows explorer la tu.

skrg ni task manager, regedit, smua dah leh pakai la kan?
bzzts Post at 12-1-2010 12:38

aku tick seme kotak uols...seme yg ader kaler tuh aku tick..

skymania

ko tick kotak NO SEARCH tak?
kalo ada, maknanya windows nak re-configure SEARCH kat windows explorer la tu.

skrg ni task manager, regedit, smua dah leh pakai la kan?
bzzts Post at 12-1-2010 12:38

a'ah..yg nih leh pakai dah..tp kalu aku nak bukak my computer..die kuar mende aku tepek tuh..

nak buat macam nmaer?? aku cancel2 jeh..

bzzts

55# skymania


jgn la kensel.
bende tu "search" windows.



kasi dia install kasi abis la.

skymania

seme!!~`aku dah ilangkan kan mende nih seme..:pompom:

bzzts

57# skymania


ilangkan? cemana?

skymania

57# skymania


ilangkan? cemana?
bzzts Post at 13-1-2010 02:00

aku dpt RVHOST neh dr YM... mesti psal base siam haremmm tuh..:@

guna cara neh...kawan porem aku (nama kittie) tolong guide..

1. Follow these steps to completely remove this worm:
   
2. 1-Start>RUN
   
3. 2-Write  CMD
   
4. 3-In CMD,write "Taskkill /T /IM "RVHOST.EXE"
   
5. then open a Notepad Start>RUn
   
6. 4-Write "NOtepad"
   
7. 5-in notepad paste these lines below
   
8. On Error Resume Next
   
9. Set shl = CreateObject("WScript.Shell")
   
10. Set fso = CreateObject("scripting.FileSystemObject")
    
11. shl.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr  entVersion\Policies\System\DisableRegistryTools"
    
12. shl.RegDelete "HKEY_CURRENT_USER\Software\Microsoft\Windows\Curr  entVersion\Policies\System\DisableTaskMgr"
    
13. shl.RegDelete
    
14. 6- save the notepad as "Enable.VBS" and the change the file type to "All"
    
15. 7-double click "Enable.VBS"
    
16. 8-now Start>Run. Write "Regedit" in it and press enter
    
17. 9- Do the following changes in Registy
    
18. 
    
19. In the left panel, double-click the following:
    
20. HKEY_CURRENT_USER>Software>Microsoft>
    
21. Windows>CurrentVersion>Run
    
22. In the right panel, locate and delete the entry:
    
23. Yahoo Messengger = "%System%\RVHOST.exe"
    
24. (Note: %System% is the Windows system folder, which is usuallyC:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NTand 2000, and C:\Windows\System32 on Windows XP and Server 2003.)-->
    
25. Removing Other Entry from the Registry
    
26. 
    
27. Still in Registry Editor, in the left panel, double-click the following:
    
28. HKEY_CURRENT_USER>Software>Microsoft>Windows>
    
29. CurrentVersion>Policies>Explorer
    
30. In the right panel, locate and delete the entry:
    
31. NofolderOptions = "1"
    
32. Restoring Modified Entries from the Registry
    
33. 
    
34. Still in Registry Editor, in the left panel, double-click the following:
    
35. HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows NT>
    
36. CurrentVersion>Winlogon
    
37. In the right panel, locate the entry:
    
38. Shell = "Explorer.exe RVHOST.exe"
    
39. Right-click on the value name and choose Modify. Change the value data of this entry to:
    
40. Explorer.exe
    
41. In the right panel, double-click the following:
    
42. HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>
    
43. Services>Schedule
    
44. In the right panel, locate the entry:
    
45. NextAtJobId = "2"
    
46. Right-click on the value name and choose Modify. Change the value data of this entry to:
    
47. 1
    
48. Close Registry Editor.
    
49. Deleting the Malware File(s)
    
50. 
    
51. Right-click Start then click Search... or Find..., depending on the version of Windows you are running.
    
52. In the Named input box, type:
    
53. AT1.JOB
    
54. In the Look In drop-down list, select My Computer, then press Enter.
    
55. Once located, select the file then press SHIFT+DELETE.
    
56. Note: AT1.JOB is a Sheduled Task so you can find this in C:\WINDOWS

Copy the Code