RVHOST.EXE – Worm Autoit

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

RVHOST.EXE – Worm Autoit removal

FileMD5Virus Alias
RVHOST.EXE 12c6c3eaf673ce4519fcb716c357c808 Worm Autoit
RVHOST.EXE 12c6c3eaf673ce4519fcb716c357c808 Trojan Hllw
RVHOST.EXE 12c6c3eaf673ce4519fcb716c357c808 Trojan Downloader
RVHOST.EXE 12c6c3eaf673ce4519fcb716c357c808 Worm Autorun
RVHOST.EXE 12c6c3eaf673ce4519fcb716c357c808 Trojan Agent
RVHOST.EXE 12c6c3eaf673ce4519fcb716c357c808 Trojan Delf

RVHOST.EXE size: 268288 bytes
RVHOST.EXE hash: 12C6C3EAF673CE4519FCB716C357C808

Created files:

%WinDir%\RVHOST.exe
%SysDir%\RVHOST.exe

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe RVHOST.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Yahoo Messengger: %WinDir%\System32\RVHOST.exe

Detected by UnHackMe:

RVHOST.EXE
Default location: %WinDir%\RVHOST.EXE

Dropper information:
MD5: 12c6c3eaf673ce4519fcb716c357c808
File size: 268288 bytes

Leave a Reply