How to remove svhost[1].exe

svhost[1].exe

The module svhost[1].exe has been detected as Ransom.Blocker

svhost[1].exe
Remove svhost[1].exe

File Details

Product Name:

Microsoft Corporation. All rights reserved.
Company Name:

Microsoft Corporation. All rights reserved.
MD5: 2df600738934c106762e89d0bb61ba09
Size: 2 MB
First Published: 2018-01-24 08:07:18 (6 years ago)
Latest Published: 2018-11-14 02:18:51 (6 years ago)
Status: Ransom.Blocker (on last analysis)
Analysis Date: 2018-11-14 02:18:51 (6 years ago)

Common Places:

%commonappdata%
%system%\config\systemprofile\appdata\local\microsoft\windows\temporary internet files\content.ie5

File Names:

svhost.exe
svhost[1].exe
svhost[2].exe
svhost.Vexe

Geography:

31.3%
18.8%
12.5%
8.3%
4.2%
4.2%
4.2%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%
2.1%

OS Version:

Windows 7 70.8%
Windows Server 2008 R2 25.0%
Windows Web Server 2008 R2 2.1%
Windows 8.1 2.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0029820c

PE Sections:

Name Size of data MD5
.text 2707456 5cf34b398e375d97a1379ff0e4eaaa1b
.itext 9216 f74006a11e37ee65c5b97d64b0a87c4f
.data 35328 e838f3776561e04c7f6b73f7dca8b633
.bss 0 00000000000000000000000000000000
.idata 15872 7aaf9c7913e7da899a8a4ab73fa43e20
.didata 3072 1913dd35b69f133705b54876a40fcc5c
.edata 512 5ce79439687ed79b06d6379b858143dc
.tls 0 00000000000000000000000000000000
.rdata 512 c7cca3bd2b75587cf23d7c85220b3fd2
.reloc 249344 09a42efda68559b2f59fc1f8ce2b826e
.rsrc 59904 408b4aa83167efdd4880d1ff0b04c973

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for svhost[1].exe
copyright for information about svhost[1].exe