Content

Adware-RVP

Type
-
SubType
Adware
Discovery Date
Length
57,884 bytes
Minimum DAT
4269 (06/04/2003)
Updated DAT
4450 (03/18/2005)
Minimum Engine
5.1.00
Description Added
07/23/2003
Description Modified
07/23/2003 4:00 AM (PT)
Risk Assessment
Corporate User
N/A
Home User
N/A

Tab Navigation

Characteristics

This is a "potentially unwanted application". It is not a virus nor a trojan.
This application can redirect users to search engines different than their default one and may also generate pop-up advertisements.

The following registry key is added:

    HKEY_LOCAL_MACHINE\Software\RVP

And the following value:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
    CurrentVersion\Run "RVP"

It creates a folder called RVP in C:\Program Files\ and drops 2 files called bpc.exe and uninst.exe.

Tests have shown that sometimes, the uninstall process completes, but the software is not removed.
This kind of file generally comes bundled with another program, which usually discloses the fact that it is ad-supported. Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

The detection of this type of files is not automatically activated. Users who would like to check for the presence of this kind of files on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7 has also an option, which enables users to detect this kind of program automatically (see below).

Symptoms

Users may be redirected to different search engines and may be the target of pop-up advertisements.
Presence of a folder called RVP in Program files.

Method of Infection

N/A – This is not a virus.

Variants

Variants

    N/A

All Information

Overview -

Characteristics

Characteristics -

This is a "potentially unwanted application". It is not a virus nor a trojan.
This application can redirect users to search engines different than their default one and may also generate pop-up advertisements.

The following registry key is added:

    HKEY_LOCAL_MACHINE\Software\RVP

And the following value:

    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
    CurrentVersion\Run "RVP"

It creates a folder called RVP in C:\Program Files\ and drops 2 files called bpc.exe and uninst.exe.

Tests have shown that sometimes, the uninstall process completes, but the software is not removed.
This kind of file generally comes bundled with another program, which usually discloses the fact that it is ad-supported. Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

The detection of this type of files is not automatically activated. Users who would like to check for the presence of this kind of files on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7 has also an option, which enables users to detect this kind of program automatically (see below).

Symptoms

Symptoms -

Users may be redirected to different search engines and may be the target of pop-up advertisements.
Presence of a folder called RVP in Program files.

Method of Infection

Method of Infection -

N/A – This is not a virus.

Removal -

Removal -

Instructions on Enabling/Disabling Detection and Removal of Potentially Unwanted Programs

Variants

Variants -

    N/A