rvshost.exe - Dangerous
rvshost.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
W32.Mysamurai is a worm that spreads by copying itself to shared drives.
Related files:
%Temp%\[TEMP NAME].tmp
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AdobeGama.pif
%User Profile%\Start Menu\Programs\Startup\AdobeGama.pif
C:\System Volume Information\_Resto~1\htSystem.cfg
%Windir%\explore.exe
%System%\CommandPrompt.Sysm
%System%\NvMedia.sysm
%System%\Restoration.msd
%System%\Windows 3D.scr
%System%\odbcad32.dll
%System%\shareNet.msd
%System%\Ngsys.exe
%System%\runer.exe
%System%\rvshost.exe
%System%\system31.exe
%System%\userint.exe
%System%\windxp.exe
%System%\winzipt.exe
Kill the process rvshost.exe and remove rvshost.exe from Windows startup.