How to remove $RVWHCF8.exe

$RVWHCF8.exe

The module $RVWHCF8.exe has been detected as Adware.YTDDownloader

$RVWHCF8.exe
Remove $RVWHCF8.exe

File Details

Product Name:

YTD Video Downloader
Company Name:

GreenTree Applications SRL
MD5: 69dfeaa46b8b0f3d0e9ba8043175a2a2
Size: 115 KB
First Published: 2017-05-22 11:25:38 (6 years ago)
Latest Published: 2019-07-27 09:38:14 (4 years ago)
Status: Adware.YTDDownloader (on last analysis)
Analysis Date: 2019-07-27 09:38:14 (4 years ago)

Overview

Signed By: GreenTree Applications srl
Status: Valid

Common Places:

%profile%\downloads
%profile%
%mydoc%
%desktop%
%sysdrive%\usuario\downloads
%sysdrive%
%sysdrive%\a to uporzadkowaniu 7.7.2018
%sysdrive%\a to rezerwa
%sysdrive%\$recycle.bin\s-1-5-21-2224203220-3146200797-2040376099-1000\$rr9eysv\backup set 2016-04-04 063936\backup files 2016-04-04 063936\backup files 3.zip\c\users\user name

File Names:

YTDSetup.exe
$RVWHCF8.exe

Geography:

13.6%
13.6%
13.6%
9.1%
4.5%
4.5%
4.5%
4.5%
4.5%
4.5%
4.5%
4.5%
4.5%
4.5%
4.5%

OS Version:

Windows 10 50.0%
Windows 7 40.9%
Windows 8.1 4.5%
Windows 8 4.5%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000039e3

PE Sections:

Name Size of data MD5
.text 28672 f569e353af0ed51bf4c216faa9bed4e7
.rdata 11264 91eee43954e068e650f7b73a8b0e6915
.data 512 db9f7acbf1c3ddfe255077b699955dfa
.ndata 0 00000000000000000000000000000000
.rsrc 49152 df489240cbf63b60f9456c40bd81f2e4
.reloc 4096 9ce8a674b1527a58ead4cb1f2496dd9f

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RVWHCF8.exe
copyright for information about $RVWHCF8.exe