What is rthgf.exe?

rthgf.exe is part of GeoGebra Classic and developed by International GeoGebra Institute according to the rthgf.exe version information.

rthgf.exe's description is "GeoGebra Classic"

rthgf.exe is usually located in the 'c:\users\%USERNAME%\appdata\roaming\' folder.

Some of the anti-virus scanners at VirusTotal detected rthgf.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

The following is the available information on rthgf.exe:

PropertyValue
Product nameGeoGebra Classic
Company nameInternational GeoGebra Institute
File descriptionGeoGebra Classic
Internal nameSetup.exe
Original filenameSetup.exe
Legal copyrightCopyright © 2020 International GeoGebra Institute
Product version6.0.588
File version6.0.588

Here's a screenshot of the file properties when displayed by Windows Explorer:

Product nameGeoGebra Classic
Company nameInternational GeoGebra Institute
File descriptionGeoGebra Classic
Internal nameSetup.exe
Original filenameSetup.exe
Legal copyrightCopyright © 2020 International GeoG..
Product version6.0.588
File version6.0.588

Digital signatures [?]

rthgf.exe is not signed.

VirusTotal report

54 of the 68 anti-virus programs at VirusTotal detected the rthgf.exe file. That's a 79% detection rate.

ScannerDetection Name
Ad-Aware Trojan.GenericKD.43368661
AhnLab-V3 Malware/Win32.RL_Generic.R343244
Alibaba TrojanBanker:Win32/ClipBanker.95f647c4
ALYac Trojan.GenericKD.43368661
Antiy-AVL Trojan[Banker]/Win32.ClipBanker
APEX Malicious
Arcabit Trojan.Generic.D295C0D5
Avast Win32:TrojanX-gen [Trj]
AVG Win32:TrojanX-gen [Trj]
Avira TR/ClipBanker.wxqms
BitDefender Trojan.GenericKD.43368661
BitDefenderTheta Gen:NN.ZexaF.34144.gv0@aiRf8Moi
Bkav W32.AIDetectVM.malware2
Comodo Malware@#1n0xb2zggl7t3
CrowdStrike win/malicious_confidence_60% (W)
Cylance Unsafe
Cynet Malicious (score: 85)
Cyren W32/Trojan.BQWW-1847
DrWeb Trojan.MulDrop11.52446
eGambit Unsafe.AI_Score_99%
Elastic malicious (high confidence)
Emsisoft Trojan.GenericKD.43368661 (B)
ESET-NOD32 a variant of Win32/ClipBanker.IR
F-Secure Trojan.TR/ClipBanker.wxqms
FireEye Generic.mg.91a11726dba01ae1
Fortinet W32/ClipBanker.IR!tr
GData Trojan.GenericKD.43368661
Ikarus Trojan.Win32.Clipbanker
Invincea heuristic
Jiangmin Trojan.Banker.ClipBanker.aee
K7AntiVirus Trojan ( 0054c4a01 )
K7GW Trojan ( 0054c4a01 )
Kaspersky Trojan-Banker.Win32.ClipBanker.lvj
Malwarebytes Trojan.ClipBanker.VMP
MAX malware (ai score=82)
McAfee GenericRXLB-UP!91A11726DBA0
Microsoft Trojan:Win32/Occamy.C80
MicroWorld-eScan Trojan.GenericKD.43368661
NANO-Antivirus Trojan.Win32.ClipBanker.hljrhj
Paloalto generic.ml
Panda Trj/CI.A
Qihoo-360 Win32/Trojan.a94
Rising Trojan.ClipBanker!8.5FB (CLOUD)
Sangfor Malware
SentinelOne DFI - Suspicious PE
Sophos Mal/Generic-S
Symantec ML.Attribute.HighConfidence
Tencent Malware.Win32.Gencirc.10cdd7d2
TrendMicro Trojan.Win32.MALREP.THFBDBO
TrendMicro-HouseCall Trojan.Win32.MALREP.THFBDBO
VBA32 BScope.TrojanDropper.Scrop
VIPRE Trojan.Win32.Generic!BT
Zillya Trojan.ClipBanker.Win32.4675
ZoneAlarm Trojan-Banker.Win32.ClipBanker.lvj
54 of the 68 anti-virus programs detected the rthgf.exe file.

rthgf.exe removal instructions

The instructions below shows how to remove rthgf.exe with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the rthgf.exe file for removal, restart your computer and scan it again to verify that rthgf.exe has been successfully removed. Here are the removal instructions in more detail:

  1. Download and install FreeFixer: http://www.freefixer.com/download.html
  2. Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.
    Screenshot of Start Scan button
  3. When the scan is finished, locate rthgf.exe in the scan result and tick the checkbox next to the rthgf.exe file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate rthgf.exe in the scan result.
    Red arrow point on the unwanted file
    c:\users\%USERNAME%\appdata\roaming\rthgf.exe
  4. Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the rthgf.exe file.
    Screenshot of Fix button
  5. Restart your computer.
  6. Start FreeFixer and scan your computer again. If rthgf.exe still remains in the scan result, proceed with the next step. If rthgf.exe is gone from the scan result you're done.
  7. If rthgf.exe still remains in the scan result, check its checkbox again in the scan result and click Fix.
  8. Restart your computer.
  9. Start FreeFixer and scan your computer again. Verify that rthgf.exe no longer appear in the scan result.
Please select the option that best describe your thoughts on the removal instructions given above








Free Questionnaires

Hashes [?]

PropertyValue
MD591a11726dba01ae1d78a4102743d9aff
SHA25680c7f9af9097fa0f8d5cdbbeab9128ee6d524d0c4eea4f95cf55b9cd687fce2b

Error Messages

These are some of the error messages that can appear related to rthgf.exe:

rthgf.exe has encountered a problem and needs to close. We are sorry for the inconvenience.

rthgf.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.

GeoGebra Classic has stopped working.

End Program - rthgf.exe. This program is not responding.

rthgf.exe is not a valid Win32 application.

rthgf.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.

What will you do with rthgf.exe?

To help other users, please let us know what you will do with rthgf.exe:



Comments

Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.

I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.

No comments posted yet.

Leave a reply