How to remove the RVHOST virus

Most antivirus programs identify RVHOST.exe as malware, e.g. Kaspersky identifies it as Worm.Win32.AutoIt.c or IM-Worm.Win32.Sohanad.bm, and Microsoft identifies it as Worm:Win32/Agent.F or Worm:Win32/Nuqel.A.
The free file information forum can help you find out how to remove it. If you know more about this file, please leave a comment or a hint for other users.

Click to Run a Free Virus Scan for the RVHOST.exe malware

RVHOST.exe file information

The process does not contain any indication of the producer (the software author) or the software with which it is associated.

Description: The file RVHOST.exe is located in the folder C:\Windows\System32 or sometimes in a subfolder of "C:\Documents and Settings". Known file sizes on Windows 7/XP are 268,216 bytes (31% of all occurrences), 268,288 bytes and 23 more variants.
Program has no file description. The file is not a Windows core file. The program has no visible window. The file is an unknown file in the Windows folder. The program starts upon Windows startup (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run). RVHOST.exe is able to record inputs, monitor applications and manipulate other programs. Therefore the technical security rating is 86% dangerous, however also read the users reviews.

Recommended: Identify RVHOST.exe related errors

If RVHOST.exe is located in the folder C:\Windows, the security rating is 62% dangerous. The file size is 272,643 bytes (33% of all occurrences), 13,179,660 bytes or 296,888 bytes. RVHOST.exe is a file without information about the developer of this file. The file is not a Windows core file. The program is not visible. It is an unknown file in the Windows folder. RVHOST.exe is able to record inputs, monitor applications and manipulate other programs.

Important: Some malware camouflages itself as RVHOST.exe, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the RVHOST.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.

Score

User Comments

Disable task manager permanantly, scanning all drives
Ang Kai Wei

is it Yahoo's file

It has something to do with wireless network. I had a virus attack (Sohanad.J/I-Worm) and it was deleted. However, I cannot use my wireless connection because of this action.
Gerald

it renames itself into another file, hides in system32 'hidden" file
bri

it duplicates folder and make it an exe file, it disable Task Manager, MS config, regedit, and others...
916716

it using large memory ofyour pc that causing to your pc run very slow
jayvee nickoh

very resilient pest disguised as Yahoo Messenger
F***_this_shit (further information)

this is very high risk virus,, normally this virus is something risky because it can damage your filke without any information,, magtataka ka na lang di mo na ma access ung file mo ,, the worst is it can damage or destroy your computer and cpu ,,even the monitor will be damage
ALLAN C. DESAMITO

A pest in the network 3 people having this surely ASA firewall will Knock out

It's a malware that can only be removed my malwarebytes anti-malware...
Hans

Definitely dangerous. Infected 200+ files and attacks system tools.
D Watts

RVHOST.exe make your computer TaskManager stop running. I use DTaskManager to kill this RVHOST.exe and delete it manually
Syed Akmal Hakim

It is dangerous. Do not play with it, System will crash
Bill

It's a malware /virus that disables task manager, regedit, folder options, msconfig etc.
pissed off

removed using avast and hijackthis
davecute

unknown file came from yahoo mesenger as i know. run regedit them select HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell, double click shell see/ explorer.Rvhost .exe right click select delete and restart solve problem
melgo

Summary: Average user rating of RVHOST.exe: based on 26 votes with 16 reviews.

7 users think RVHOST.exe is essential for Windows or an installed application. 3 users think it's probably harmless. 1 user think it's neither essential nor dangerous. 5 users suspect danger. 10 users think RVHOST.exe is dangerous and recommend removing it. 3 users doesn't grade RVHOST.exe ("not sure about it").

RVHOST scanner

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

MalwareBytes detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.

Other processes