How to Remove the RVHOST.exe Virus

1. Click 'My Computer.'
2. Select the 'Windows' Folder.
3. Select 'System32.'
4. Delete files 'C:\\Windows\System32\RVHOST.exe', 'c:\windows\system32\rvhost.exe', '%alldrivers%\newfoler.exe', and 'C:\\Windows\Tasks\At1.job' if they exist.
5. Open Notepad.
6. Copy and paste or type the follow message:On Error Resume Next
Set shl = CreateObject('WScript.Shell')
Set fso = CreateObject('scripting.FileSystemObject...
shl.RegDelete 'HKEY_CURRENT_USER\Software\Microsoft\Wi... entVersion\Policies\System\DisableRegist...
shl.RegDelete 'HKEY_CURRENT_USER\Software\Microsoft\Wi... entVersion\Policies\System\DisableTaskMg...
shl.RegDelete
7. Save the file and name it 'Enable.VBS.'
8. Double-click your new file 'Enable.VBS.'
9. Click Start and select 'Run.'
10. Type: regedit.
11. Double click 'HKEY_CURRENT_USER>Software>Microsoft>Windows>CurrentVersion>Run'
12. Delete the follow (if present) when the selections appear:'%Systems%RVHOST.exe'
13. Stay in the same location. Double click the following which will be in the left panel: 'HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>...NT>
CurrentVersion>Policies>Explorer.'
14. On the right panel find 'NoFolderOptions='1'' and delete it.
15. Go back to the left side panel and click: 'HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>... NT>CurrentVersion>Winlogon'
16. Find the file name 'Shell = Explorer.exe RVHOST.exe''.
17. Select the value name and choose 'Modify' when the menu appears.
18. Change the value to 'Explorer.exe.'
19. Double click :
'HKEY_LOCAL_MACHINE>SYSTEM>CurrentContr...Services>Schedule'which is on the left side of the screen.
20. On the right find file: 'NextAtJobld='2'.
21. Select the value name and when the options menu comes up select 'Modify.'
22. Change the value to '1' and close the registry editor.
23. Restart your computer.