Log in

View Full Version : RVHost.exe virus deleted


DanObie
Mar 14, 2007, 05:50 AM
After using an antivirus software to remove a Trojan Horse the file RVHost was deleted. It resulted in a statement telling me that the administrator of the computer disabled the Task Manager. Is there anyway of enabling Task Manager again?

ANETGames
Mar 14, 2007, 03:48 PM
Hello DanObie,
My name is ANETGames.
Hopefully I will be able to help you get your Task Manager back and working.
Im assuming you have Windows XP.

You are going to need to open the Registry Editor.
START > RUN > Type: regedit.exe
then press OK. Now, you will just need to navigate to, and modify the following registry entries to match the ones below.

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System
"DisableTaskMgr" = 00000000

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\policies\system\
"DisableTaskManager" = 00000000

If you don't know how to do this, I remember a website offering a registry auto-repairer, but I don't know if it still is active.
www.kellys-korner-xp.com/regs_edits/taskmanager.reg

Good Luck

ShahbazAli
Oct 10, 2007, 04:28 AM
After using an antivirus software to remove a Trojan Horse the file RVHost was deleted. It resulted in a statement telling me that the administrator of the computer disabled the Task Manager. Is there anyway of enabling Task Manager again?
If the system Registery editor is disable the rvhost virus then what can we do?

jastrg
Nov 19, 2007, 09:25 PM
After using an antivirus software to remove a Trojan Horse the file RVHost was deleted. It resulted in a statement telling me that the administrator of the computer disabled the Task Manager. Is there anyway of enabling Task Manager again?
Hello I Jas how to remove RVHOST.exe

invisibleman_productions
Nov 19, 2007, 09:51 PM
About the file RVHOST.exe
Aliases
* Trojan.Agent.ahe (Rising) * W32/SillyFDC-G (Sophos) * W32/SillyFDC.G (Fortinet)
* W32/Sohanat.BD.worm (Panda) * Win32.HLLW.Cung (Doctor web) * Win32/Nuqel.A (Ca vet)
* Win32:Hakaglan [Wrm] (Alwil) * Worm.Hakaglan.B (Virusbuster) * Worm.Win32.AutoIt.e (Kaspersky) * Worm/Hakaglan.A.2 (H+BEDV)

RVHOST.exe - Program Information (http://www.bleepingcomputer.com/startups/RVHOST.exe-16592.html)
W32.Imaut.N - Symantec.com (http://www.symantec.com/security_response/writeup.jsp?docid=2006-121310-2059-99&tabid=2)
W32/SillyFDC-G - Worm - Sophos threat analysis (http://www.sophos.com/security/analyses/w32sillyfdcg.html)
W32/Hakaglan.worm (http://vil.nai.com/vil/content/v_141756.htm)

Steps to remove RVHOST.exe

1a. Run a free online virus scan to be sure you computer is virus and spyware free.
Security News from the net: Online virus scan (http://securitynewsfromthenet.blogspot.com/2007/03/online-virus-scan.html)

1b. Download and run Firefox to protect your from future spyware attacks and pop ups which are coming in through internet explorer (Trojan downloaders, win32 ) .Then update your windows through Firefox
Security News from the net: spyware fighter essentials (http://securitynewsfromthenet.blogspot.com/2007/05/spyware-fighter-essentials.html)

2. Run the vundo and combo fix
Security News from the net: vundofix and combo fix (http://securitynewsfromthenet.blogspot.com/2007/05/vundofix-and-combo-fix.html)

3. Run the anti spyware remove programs spybot
Security News from the net: Spybot search and destroy spyware and popups (http://securitynewsfromthenet.blogspot.com/2007/03/spybot-search-and-destroy-spyware-and.html)

And superantispyware
Security News from the net: SUPERAntiSpyware Home Edition (free version) (http://securitynewsfromthenet.blogspot.com/2007/04/superantispyware-home-edition-free.html)
To get rid of the nasties



WHAT DO YOU DO IF EVERYTHING FAILS TO REMOVE THE SPYWARE or You are not sure your computer is spyware and virus free?
If everything fails to get the nasty spyware removed let the experts take a look at what's happening on your computer.Visit the HijackThis Logs and Analysis forum.
BleepingComputer.com -> HijackThis Logs and Malware Removal (http://www.bleepingcomputer.com/forums/forum22.html)

invisibleman_productions
Nov 19, 2007, 10:05 PM
After using an antivirus software to remove a Trojan Horse the file RVHost was deleted. It resulted in a statement telling me that the administrator of the computer disabled the Task Manager. Is there anyway of enabling Task Manager again?

The following knowledgebase will help you to resolve the error message "Task Manager has been disabled by your administrator" when you try to use "Task Manager"
PC Hell: Task Manager Has Been Disabled By Your Administrator - Fix (http://www.pchell.com/support/taskmanagerdisabled.shtml)
"Task Manager has been disabled by your administrator" error message (http://support.microsoft.com/kb/555480)

Or
Go to Start –> Run and copy and paste the following and press OK.

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System /v DisableTaskMgr /t REG_DWORD /d 0 /f

Task Manager has been disabled by your administrator « Techno Digits (http://technodigits.wordpress.com/2007/06/27/task-manager-has-been-disabled-by-your-administrator/)