SearchProtocolHost.exe is a part of the Windows Indexing Service and the Windows operating system so don’t want to disable it. It is an application that indexes files on the local drive making them easier to search. SearchProtocolHost.exe is a executable software module that may have been pre-installed on your computer. The exact folder location for this file is “C:\Windows\system32\SearchProtocolHost…”. “SearchProtocolHost.exe” is a Microsoft process, a component of Windows Search. On 64-bit Windows systems, two versions exist, one in “C:\Windows\SysWoW64” to search 32-bit files and one in “C:\Windows\System32” for 64-bit work. A 32-bit system only has one in “C:\Windows\System32”. Two instances are launched by SearchIndexer.exe, one in the system context and one in the user context, (thus four overall, in 64-bit Windows).
It “hosts” protocol handlers, which are DLL libraries, each of which is tuned for the structure of a single file type, (for example, “.docx” for Word, “.xlsx” for Excel). “), by loading and initializing all handlers and then setting up threads. File Filtering. Once a handler is loaded it remains resident until the search ends. Windows Search identifies and indexes files by their Uniform Resource Identifier which includes more than just filenames and paths. The .exe extension on a filename indicates an executable file. Sometimes executable files can harm your computer.
The known file sizes on Windows 10/8/7/XP are 164,352 bytes (50% of all occurrences), 272,896 bytes, and 23 other types. https://www.file.net/process/searchprotocolhost.exe.html. There is no visible window in the program. This is a trusted file from Microsoft. SearchProtocolHost.exe is a Windows system file. Therefore the technical safety rating of 3% is dangerous. If SearchProtocolHost.exe is located in a subfolder of C:\Windows, the security rating is 4% dangerous. The file size is 164,352 bytes (40% of all occurrences), 336,384 bytes and 9 more variants. The file is a Microsoft signed file. The program has no visible window. SearchProtocolHost.exe is able to manipulate other programs.
Causes of SearchProtocolHost.Exe Application Error
- Due to Missing or corrupt file.
- Due to the outdated drivers.
- Due to Virus or malware function.
How to check if your computer is infected with searchprotocolhost.exe malware?
- If the searchprotocolhost.exe file is taking more of your CPU memory.
- If the internet connection fluctuation is high.
- If the system performance is very low.
- If the system is getting some annoying popup ads.
- If the system is redirected to some strange websites.
- If the system freezes quiet often.
- If it invites the other malware to infect and damage the system and exploits the same to collect the user private information.
What to do to resolve SearchProtocolHost issues?
To avoid problems with SearchProtocolHost, run a scan for malware, clean your hard drive using 1cleanmgr and 2sfc /scannow, 3 uninstall programs you no longer need, check for auto start programs using 4msconfig , Windows 5, enable automatic updates and back up periodically, or at least set restore points. Use the 6resmon command to identify the processes causing problems in SearchProtocolHost. Instead of reinstalling Windows, repair the installation or, for Windows 8 and later, execute the command 7DISM.exe /Online /Cleanup-image /Restorehealth. It allows you to repair the operating system without losing data.
To help you analyze the SearchProtocolHost.exe process on your computer, the following programs have proven to be helpful: A Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.
Below we describing some solutions to fix SearchProtocolHost.Exe Application Error :
1. Fix SearchProtocolHost.Exe Application Error using Disk Cleanup
- Press ‘Windows’ keyboard shortcut key, type ‘Disk Cleanup’ in the search bar and click ‘Disk Cleanup’.
- Now, you have to choose the ‘hard drive’ where Windows 10 is installed and tap on ‘OK’ button.
- The Disk Cleanup will scan your computer, you need to choose all the junk files and tap on ‘OK’ button after making sure that Temporary files option is ticked.
2. Fix SearchProtocolHost.Exe Application Error by reinstalling Microsoft Office
- Press ‘Windows+I’ keyboard shortcut key to open ‘Settings’.
- Select ‘Apps and Features’ option, search ‘Microsoft Office’ from the list, tap on it and click ‘Uninstall’.
- Follow on-screen instructions provided.
- After uninstall it successfully, download the application from Microsoft Office and install.
3. Fix SearchProtocolHost.Exe Application Error by Enabling Windows Search Service
- Press ‘Windows’ keyboard shortcut key, type ‘administrative tools’ in the search bar and click ‘Windows Administrative Tools’.
- In the Windows Administrative Tools window, Tap on ‘Services’ and
- Find ‘Windows Search’ right-click on it and choose ‘Start’ option to enable it.
4. Fix SearchProtocolHost.Exe Application Error by Running System File Checker
- Press ‘Windows’ keyboard shortcut key, type ‘ cmd’ in the search bar and click ‘Command Prompt’.
- In the Command Prompt window, type ‘ sfc /scannow’ and press ‘Enter’.
- After complete scanning process, restart your computer.
Steps to Uninstall SearchProtocolHost.exe
- If the file is a part of a software program, then it will also have an uninstall program.
- Press ‘Windows’ keyboard shortcut key, click ‘File Explorer’ and double-click ‘Local Disk(C:)’ to open it.
- Go to ‘Program Files’, click ‘Microsoft Windows Operating System’ and select ‘Windows Search’.
- Now click Microsoft Windows Search Protocol Host and tap on SearchProtocolHost.exe_uninstall.exe.
- The SearchProtocolHost.exe was installed using the Windows Installer then to uninstall it navigate to ‘System Settings’ and open ‘Add Or Remove Programs’ Option. Then Search for SearchProtocolHost.exe or the software name Windows Search in the search bar or try out the developer name Microsoft Windows Operating System.
- Click on it and choose the ‘Uninstall Program’ option to remove SearchProtocolHost.exe file from your computer.
We have described all the information related to SearchProtocolHost.exe. Hope you are like it! Thanks for reading this article. If you want to know more details about Hulu Error 5003. Click Here
-
Home
-
News
- Fixed: SearchProtocolHost.exe High CPU Usage in Windows 10
By Sonya |
Last Updated
What is SearchProtocolHost.exe and why does it consume so much CPU? If you don’t know, then this post from MiniTool is what you need. This post gives you detailed information about it and you can also know how to fix SearchProtocolHost.exe high CPU in Windows 10.
What Is SearchProtocolHost.exe?
SearchProtocolHost.exe is used to run Search Protocol Host, which is an important part of the Windows Search component and helps index files on Windows computers. The SearchProtocolHost.exe file is located in the C:\Windows\System32 folder.
Tip: Want to know more things about the System32 folder? Then you can read this post – What Is System 32 Directory and Why You Shouldn’t Delete It?
SearchProtocolHost.exe is used to execute the Windows Search utility and doesn’t pose any threat to your computer.
How to Fix SearchProtocolHost.exe High CPU?
Sometimes, the SearchProtocolHost.exe file consumes so much CPU because the Indexer cannot find certain files on the system. Then how to fix the SearchProtocolHost.exe high CPU error? There are three methods you can take to get rid of the error.
Method 1: Change Indexing Options
The first method you can try to fix the SearchProtocolHost.exe high CPU error is to change Indexing Options. Your search may not be as fast as before, but it may help you get out of the situation. Here is a quick guide:
Step 1: Type indexing options in the Search bar and then click Indexing Options to open it.
Tip: Missing Search bar? Then you can read this post – Windows 10 Search Bar Missing? Here Are 6 Solutions.
Step 2: In the newly pop-out window, click Modify at the bottom to open Indexed Locations.
Step 3: Click Show all locations, then uncheck huge locations (in this case, uncheck Local Disk C:) and other file locations that may prompt the search process to spawn again and again. Click OK to save changes.
Step 4: Reboot your system to check if SearchProtocolHost.exe is still using high CPU.
Method 2: Run the SFC Tool
If your system configurations are not set correctly on your computer, then you may meet the SearchProtocolHost.exe high CPU error. But luckily, there is a powerful built-in tool that you can use to check for any integrity violations and fix them. Here is the way you need to do:
Step 1: Type cmd in the Search bar and then right-click Command Prompt to choose Run as administrator.
Step 2: In the newly pop-out window, type DISM.exe /Online /Cleanup-image /Restorehealth and then press Enter to execute it.
Step 3: Wait until the process is finished. Then type sfc /scannow in the window and press Enter to execute the SFC scan.
Step 4: Restart your computer to check if the SearchProtocolHost.exe file is consuming so much CPU.
Method 3: Disable the Windows Search Service
If you find that SearchProtocolHost.exe still consumes you a large amount of CPU after you tried the two methods above, then you need to disable the Windows Search service. But you should know that you cannot use Windows Search on your computer if you adopt the method.
Here is the tutorial:
Step 1: Press the Win + R keys at the same time to open the Run box.
Step 2: Type services.msc in the box and then click OK to open Services.
Step 3: Find Windows Search in the list and then right-click it to choose Properties.
Step 4: Set Startup type to Disabled and then click Stop. Click Apply and OK to save changes.
Step 5: Restart your computer to check if the error is fixed.
Bottom Line
This post offers you some information about SearchProtocolHost.exe. And if you find that SearchProtocolHost.exe consumes high CPU, then you can try the methods mentioned in this post to solve the problem.
About The Author
Position: Columnist
Author Sonya has been engaged in editing for a long time and likes to share useful methods to get rid of the common problems of Windows computers, such as Windows Update error. And she aims to help more people to protect their data. What’s more, she offers some useful ways to convert audio and video file formats. By the way, she likes to travel, watch movies and listen to music.
Are you seeing High CPU Usage by Searchprotocolhost.exe in Task Manager?
Or
You don’t know what even is Microsoft Windows Search Protocol Host?
Recently users have reported that when they opened the Task Manager they saw that searchprotocolhost.exe is using almost 90% of the CPU
So, many users did is restarted or tried to disable it which was a bad move to overcome search protocol host high CPU usage.
First of all, you don’t need to worry much because you are not alone in this and many users were trying some wrong fixes for searchprotocolhost exe on Windows 11.
But,
We have compiled a list of the best solutions for you to fix the searchprotocolhost.exe High CPU Usage.
Before going to the fix there will be some important questions regarding the Microsoft Windows Search Protocol Host error that might be in your mind.
What Is SearchProtocolHost.exe? What does SearchProtocolHost exe do?
Searchprotocolhost.exe is an executable file and stands for Microsoft Windows Search Protocol Host and was introduced in Windows XP,7, 8, and can also be found in the latest versions of Windows 10 and 11.
Microsoft Windows Search Protocol Host plays an important role in windows OS and is responsible for search performance on your PC.
It’s a part of the Windows Indexing service and helps index files on your PC.
Searchprotocolhost.exe is allocated in C:/Windows/System32/ folder and the file size is almost 164,352 bytes.
So, whenever search protocol host will try to find files and navigate them to the address it’s obvious it would use high disk/CPU, and disabling it will lead to malfunctioning of other systems related to Windows OS.
Is Searchprotocolhost.exe Virus?
It’s totally safe as search protocol host is a legitimate program digitally signed by Microsoft Corporation and most users have not found it safe.
As it is legitimate so hackers might attack the program to make changes and carry out their illegal activities through searchprotocolhost.exe
Also, we can clear our doubt that the Microsoft Windows Search Protocol Host is a virus or not by checking the file location as it should be located in its default file location when it was originally developed.
But still, to be on the safe side you can check if there’s a virus or not through Task Manager:
- Press together Ctrl + Shift + Esc keys to open Task Manager.
- Go to Details and look for search protocol host
- Also on your right side under the description column make sure its name is correct.
- Right-click on it and select Open file location.
- If it is located at C:\Windows\System32
And if it’s not in the given address then it might be a virus or spyware so my advice is for you to run a full system scan with the help of your anti-virus program installed on your PC.
Solution 1: Run Search and Indexing Troubleshooter
This Search and Indexing will look for errors all-around your PC and will fix them.
Moreover, the corrupted files that will get fixed with it will also solve searchprotocolhost.exe high CPU Usage.
So, here’s what you need to do:
- Click on the Search icon
- Select Control Panel.
- Now look for Troubleshooting
- In the left pane click on View all.
- Now double-click on Search and Indexing
After the troubleshooting is done you need to run your Windows in Safe Mode.
And you do this by following the steps below:
- Press Windows Button + R Key
- The Run Dialogue Box will appear
- Type “msconfig“ and press Enter.
- The System Configuration window will open and then click on the Boot tab.
- Now checkbox the Safe boot option.
- Then click on Apply and OK for the system to reboot in safe mode.
- After rebooting check if searchprotocolhost.exe high CPU usage is fixed or not.
Solution 2: Changing Indexing Option Search Protocol Host High CPU Usage
Another reason for searchprotocolhost.exe is due to the indexer which cannot find some files in the system.
So it’s better to make some changes to the indexing option.
And here’s what you need to do:
- Click on the Search icon and type Indexing Options.
- Now click on Modify.
- Click on Show all Locations and uncheck local disk C location and other file locations which cause high CPU usage.
- Now restart your PC and check if the Microsoft windows search protocol host is fixed or not.
Moving on to solution 3 for searchprotocolhost.exe high CPU usage.
Solution 3: Update Windows 11 to Fix Searchprotocolhost.exe High CPU Usage
Sometimes your outdated PC is the main cause of the Microsoft windows search protocol host in Windows 11
For the best performance of your PC, you need to make sure that your Windows OS is up to date, and with new updates, the bugs or errors like search protocol host will get fixed.
So, here is how you can update your Windows 11 OS:
- Click on the Windows icon
- Click on the settings icon
- A new window will pop up
- Select Windows Update from the left menu
- The new window will pop up
- Then click on Check for updates button.
- If there is any update it will start updating the PC
- It will take some time to update Windows OS and after that, you can restart your PC.
If the above solution didn’t work you can move on to the next one for fixing Windows search protocol host high CPU usage
Solution 4: Perform a System File Check
Sometimes the damaged file can lead to searchprotocolhost.exe high CPU usage on Windows 11 and your program will be unable to run.
So, the Sfc(System file checker) helps you scan the errors and replaces them if searchprotocolhost.exe replicated itself.
Here’s what you need to do to fix the search protocol host exe high CPU usage:
- Open Command Prompt as an Administrator, press Windows Key + X
- Or, search “Command Prompt” in the Startup menu, then choose Run as administrator
- Type “sfc /scannow”
- Be careful with the spaces between commands.
- This action may take up to 20 minutes so don’t interrupt it.
- After that restart your PC and check if searchprotocolhost.exe high CPU usage is solved or not.
Also Read: MMC.exe Error Blocked
Solution 5: Scan System File to Fix Searchprotocolhost.exe high CPU usage
Most errors are caused by corrupted files, so start by checking the system files to fix the searchprotocolhost.exe error
You can do this using the DSIM tool which will replace missing files.
While typing commands be careful at the spaces between ‘/’ and word.
So here’s what you need to do to fix the Microsoft Windows search protocol host:
- Search by pressing the Window key and type “Command Prompt“
- Right-click “Command Prompt” and select “Run as Administrator“. The option is available in the right pane of the window too.
- Type “DISM.exe /Online /Cleanup-image /Res and press Enter.
- It Might take up to 30 minutes to complete the process
- Once the operation is completed successfully, type “sfc /scannow” in the command line and then press the Enter key.
- If there were any corrupted files you would see the following message on the command line: “Windows Resource Protection detected corrupted files and successfully restored them.”
- If so, type exit and hit enter.
- Searchprotocolhost.exe error corrupted files would have been fixed by now.
- You can restart your windows and check if the searchprotocolhost.exe high CPU usage error in Windows 7 exists.
If the above solution didn’t fix the search protocol host then move on to the next solution.
Solution 6: Disable Windows Search to Fix Search Protocol Host
Disabling Windows Search will help you get over searchprotocolhost.exe high CPU usage but you should know that Windows search is an important service for Windows and can have drawbacks when you disable it.
But you can disable it when you don’t need it in near future.
So, here’s what you need to do:
- Press Windows key + R to open the Run window.
- Then type services.msc and click OK to enter the service app.
- Scroll down and find Windows Search and double-click the Services to open its properties.
- In the Startup Type section choose Disabled from the drop-down list.
- If the Service status is Running then click on the Stop button.
- Click on Apply and then select OK.
- After restarting your PC check if the searchprotocolhost.exe high CPU usage is fixed or not and you can enable Windows search using the same steps once your error is solved.
Conclusion
So, these are the best fixes we could get for you in fixing searchprotocolhost.exe High CPU Usage in Windows 11 and
Disabling search protocol host from your system is not that much of an easy job and also we don’t recommend it to so that’s why we have provided you with the best possible solutions.
So, you shouldn’t take it lightly and never try to ignore it if the search protocol host exe high CPU usage is acting like malware and it might get your personal data.
It’s best you try all the solutions and if you have any other fix related to searchprotocolhost.exe high disk usage or any type of question then just let us know in the comment section below.
FAQs
-
How do I get rid of SearchProtocolHost?
You can get rid of SearchProtocolHost by following the list below:
1. Update your Windows.
2. Disable Windows search feature.
3. Scan for malware. -
What does .exe mean?
It’s a short form of an executable file and helps Windows run and install the software.
-
Why does searchprotocolhost.exe crash?
Searchprotocolhost.exe crashes due to corrupted files or sometimes the data usage it wants to collect is corrupted
-
Is searchprotocolhost exe safe?
Searchprotocolhost is not a virus unless it replicates itself or harms your computer so it’s totally safe
Zul is an avid gamer with a passion for RPG and racing games. He enjoys playing games like Need for Speed and Grand Theft Auto 5 and is also skilled at fixing errors and crashes to enhance the gaming experience. Zul stays up-to-date with the latest gaming news and enjoys sharing his knowledge through writing gaming guides and articles.
Follow him on Twitter
The genuine SearchProtocolHost.exe file is a software component of Microsoft Windows Operating System by .
«SearchProtocolHost.exe» is a Microsoft process, a component of Windows Search. On 64-bit Windows systems, two versions exist, one in «C:\Windows\SysWoW64» to search 32-bit files and one in «C:\Windows\System32» for 64-bit work. A 32-bit system only has one in «C:\Windows\System32». Two instances are launched by SearchIndexer.exe, one in the system context and one in the user context, (thus four overall, in 64-bit Windows). It «hosts» the protocol handlers, which are DLL libraries each tuned to one file type’s structure, (e.g., «.docx» for Word, «.xlsx» for Excel), by loading and initializing all handlers and then establishing threads to do file filtering. Once a handler is loaded it stays resident until Search ends. Note that Windows Search identifies and indexes files by their Uniform Resource Identifier which includes more than the filename and path.
SearchProtocolHost stands for Microsoft Windows Search Protocol Host
The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the SearchProtocolHost.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.
Click to Run a Free Scan for SearchProtocolHost.exe related errors
SearchProtocolHost.exe file information
The process known as Microsoft Windows Search Protocol Host belongs to software Windows Search or Microsoft Windows Operating System by Microsoft (www.microsoft.com).
Description: SearchProtocolHost.exe is an important part of Windows, but often causes problems. The file SearchProtocolHost.exe is located in the C:\Windows\System32 folder.
Known file sizes on Windows 10/11/7 are 164,352 bytes (45% of all occurrences), 340,992 bytes and 26 more variants.
The program has no visible window. It is a trustworthy file from Microsoft. SearchProtocolHost.exe is a Windows system file.
SearchProtocolHost.exe is able to manipulate other programs.
Therefore the technical security rating is 3% dangerous, but you should also take into account the user reviews.
Recommended: Identify SearchProtocolHost.exe related errors
If SearchProtocolHost.exe is located in a subfolder of C:\Windows, the security rating is 7% dangerous. The file size is 164,352 bytes (39% of all occurrences), 336,384 bytes and 9 more variants.
The SearchProtocolHost.exe file is a Microsoft signed file. The program is not visible.
SearchProtocolHost.exe is able to manipulate other programs.
Important: Some malware camouflages itself as SearchProtocolHost.exe, for example PE_VIRUX.R (detected by TrendMicro), and W32.Virut.CF (detected by Symantec). Therefore, you should check the SearchProtocolHost.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer’s security. This was one of the Top Download Picks of The Washington Post and PC World.
Best practices for resolving SearchProtocolHost issues
A clean and tidy computer is the key requirement for avoiding problems with SearchProtocolHost. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows’ 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.
Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.
To help you analyze the SearchProtocolHost.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.
Other processes
itype.exe vistadrv.exe ccsvchst.exe SearchProtocolHost.exe nusb3mon.exe uninstallmonitor.exe fsusbexservice.exe gjagent.exe bho.dll clistart.exe aahmsvc.exe [all]
No.
Company
File Type
SHA1
MD5
Malware
Name
Digitally
Signed
File
Version
Product
Version
Submitted
From
Malware Behavior
1
Microsoft Corporation
Executable
0c8e93cd0e64c426
ac8f983bacbe3451
37fbf946
5e129be0c8b85597
698f0fe3633a902f
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
South Africa
N/A
2
Microsoft Corporation
Executable
6bfc8e8c5066f13d
01b166659cb4a810
54f68ff1
635ef2f1606bf4c4
141a18f85c703914
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
Indonesia
N/A
3
N/A
Executable
dd00740613a62260
450cd91cbc5f6f81
7b12ac71
c9ebd97e9c3a218c
aa8c94e379e89021
Virus.Win32.
Virut.Ce
No
N/A
N/A
Egypt
N/A
4
Microsoft Corporation
Executable
b6460740b381f00f
c4b7e29a440d5696
83b3edfb
7eca8e3e27c4a705
f7a957c41a16ab8c
Virus.Win32.
Virut.CE
No
7.00.7601.
24275
(win7sp1_l
dr.180922-
1650)
7.00.7601.
24275
Indonesia
N/A
5
N/A
Executable
6e60ea2fdd265d98
63bf4591a06abd52
6e7a702d
51922b9c113f73d3
d288c2c5b7bf62c2
Win32.Neshta
.A
No
N/A
N/A
Russian Federation
N/A
6
Microsoft Corporation
Executable
dd5cabd1da77dfe4
ff570305e664e19d
52d53e03
1a394336975e2382
fc00796450df4cf2
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
105.112.28.159/32
N/A
7
Microsoft Corporation
Executable
d0e8a4ac1ec659e9
3ab34c4b4b7a4382
d009a95d
ab93a5921dc79f98
1c47f67d8f34a276
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
Indonesia
N/A
8
Microsoft Corporation
Executable
362a196ddedb7f2e
6e85148a6f2f7ff0
26b718e3
37292f8f21fca303
dfb7b0665fcb734f
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
South Africa
N/A
9
Microsoft Corporation
Executable
ad96e5a8bcec505d
32609a2dc6448c70
a7da07c2
d531f67cb762890d
192bff5ba9fcfcac
Virus.Win32.
Virut.CE
No
7.00.10586
.589
(th2_relea
se.160906-
1759)
7.00.10586
.589
Indonesia
N/A
10
Microsoft Corporation
Executable
1995f7af74bc9eb5
974bf9af60703c31
b684a56b
be7131c812906f9f
996670baa0378092
Virus.Win32.
Virut.CE
No
7.00.7601.
17610
(win7sp1_g
dr.110503-
1502)
7.00.7601.
17610
United States
N/A
11
N/A
Executable
a107a4cb20133c2f
74799a41816823d4
ee9fb771
bbc8687b3ee146bf
82d79ec9fa80cb24
Win32.Neshta
.A
No
N/A
N/A
181.66.169.99/32
N/A
12
N/A
Executable
6d8e6fab58cfc3bf
90c08d78a61bd013
7dce1786
8f6a4a77ab80e3c9
82f5eb80c83fe531
Virus.Win32.
Virut.CE
No
N/A
N/A
United States
N/A
13
N/A
Executable
5f4720e1818cc0e8
86ae729dad0c0a5c
7952174e
43640d53c33e0d33
34945efd4b3cc226
Virus.Win32.
Virut.CE
No
N/A
N/A
Nigeria
N/A
14
N/A
Executable
e0509f95a3dd5d1c
502e9d895a0fe484
c293922e
6b777f8ae8550b4f
488c3f39b25277df
Win32.Neshta
.A
No
N/A
N/A
181.66.169.99/32
N/A
15
Microsoft Corporation
Executable
60619e339480f40c
292176c136109129
6fd1150e
bc6ad14748e999b4
2ce7564b6f812c9b
Virus.Win32.
Parite.gen
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
Indonesia
N/A
16
Microsoft Corporation
Executable
4e052f048d95847f
133690059ef696e3
365b41fd
869ba894f84c492e
45ecd3c2aa8b2c62
Virus.Win32.
Virut.CE
No
7.00.7601.
17610
(win7sp1_g
dr.110503-
1502)
7.00.7601.
17610
Morocco
N/A
17
Microsoft Corporation
Executable
357190ceee57b1c5
e7c4a2e1cfe5e8a5
9b47353d
b88398bee3a92e20
66370ceb2facc733
Virus.Win32.
Expiro.naf
No
7.00.7601.
23930
(win7sp1_l
dr.171011-
1526)
7.00.7601.
23930
Russian Federation
N/A
18
N/A
Executable
216103c6a923fde2
ceced16831fa1c2e
4f243faa
28c6490a56010292
dd5953d59dc45b81
Win32.Neshta
.A
No
N/A
N/A
Russian Federation
N/A
19
Microsoft Corporation
Executable
6187eaad1fc675b4
60878adb67ef7978
6e32ca4c
292d3657791551fc
3658b5bcf2c380c5
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
103.137.83.105/32
N/A
20
Microsoft Corporation
Executable
5b9a4cc757b359ca
5e966406af7a15c5
78d19b42
793ff52e8d376553
7b549a7dedd84e6b
Virus.Win32.
Virut.CE
No
7.00.7600.
16401
(win7_gdr.
090727-150
4)
7.00.7600.
16401
Russian Federation
N/A
21
Microsoft Corporation
Executable
8c82531270fd2224
37ab1a803b09242c
0f67b944
8be963c66542884d
5958e0d2cdfb41a5
Virus.Win32.
Virut.CE
No
7.00.7600.
16401
(win7_gdr.
090727-150
4)
7.00.7600.
16401
Egypt
N/A
22
Microsoft Corporation
Executable
13e6bceba5ee79ee
c58f72f41be5f502
23b99fad
5ed369df19144c34
12ca2f626e63bca9
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
Indonesia
N/A
23
Microsoft Corporation
Executable
fc0d80ab227a471b
9d6e020a392983e4
07df6b5e
78efe66df8cae60a
d6bb6971e1ea9b15
Virus.Win32.
Virut.Ce
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
197.210.85.24/32
N/A
24
Microsoft Corporation
Executable
2f3bfc9c780fc1ed
79244554d13d4a1a
52bf9827
d87d9225aac6ddb4
a664a817b68bfbb9
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
154.79.72.117/32
N/A
25
Microsoft Corporation
Executable
6110ac57d1d7fd36
2bccf7a2e4ba6b3f
610fc8b6
9b5d8390aeed58cf
174f3a23a77e552c
Virus.Win32.
Parite.gen
No
7.0.6001.1
6503
(longhorn(
wmbla).080
526-2159)
7.0.6001.1
6503
Turkey
N/A
26
N/A
Executable
c4a9fec2e2f7c0cf
7093c61dcd53be6d
db669d4c
0bda86720ee21fc8
c29e69017d205f16
Virus.Win32.
Virut.CE
No
N/A
N/A
Indonesia
N/A
27
N/A
Executable
8e3e2574064ffe05
cbd4d5167bc488bc
56028d70
c2f72d25b73aaeb1
d401b7ee7210d420
Virus.Win32.
Virut.CE
No
N/A
N/A
197.210.44.209/32
N/A
28
N/A
Executable
623cabe8ef50c181
83919eaf5ad1cfad
99549ca1
5e75d4797a873efe
01252442361dd021
Virus.Win32.
Virut.CE
No
N/A
N/A
Malaysia
N/A
29
Microsoft Corporation
Executable
c7ee66e099b34f8c
92103bc1dcb9eac5
e8c077fe
b323e2b6a3712dfc
454ea8e8d7e94118
Virus.Win32.
Virut.Ce
No
7.00.7601.
17610
(win7sp1_g
dr.110503-
1502)
7.00.7601.
17610
Syrian Arab Republic
N/A
30
Microsoft Corporation
Executable
b468fad7dea477cb
68ceeb431804c205
335ce6e7
ae6086cf21e847e4
a67f7af8e3f798b6
Virus.Win32.
Virut.CE
No
7.00.7601.
17610
(win7sp1_g
dr.110503-
1502)
7.00.7601.
17610
Egypt
N/A
31
Microsoft Corporation
Executable
777839f7cbd3e96a
40e6be1b6a6a348c
96cca8ac
fd3a4c4f0734f587
0acfb42eb7119303
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
Indonesia
N/A
32
Microsoft Corporation
Executable
ad1bf17f87c0a60d
9793fa369512dad4
8abe2bdf
323dc667534c4045
f88edc9035efd12e
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
156.211.75.28/32
N/A
33
Microsoft Corporation
Executable
52d3aa659de4f2b6
bf36e6f6a7b9930f
dd97436c
3e5e0619e94a6d2d
065a6bfd9b66ad56
Virus.Win32.
Virut.CE
No
7.00.7601.
23834
(win7sp1_l
dr.170601-
2259)
7.00.7601.
23834
197.47.18.132/32
N/A
34
Microsoft Corporation
Executable
0510a26966e17b80
71e2ad3f6fa228b7
ee9efd8b
13937469d3a357a0
743584ca51fb6765
Virus.Win32.
Virut.CE
No
7.00.9600.
17415
(winblue_r
4.141028-1
500)
7.00.9600.
17415
156.201.204.239/32
N/A
35
Microsoft Corporation
Executable
38f7ed5237a5d70b
f43ff726336929dc
44799108
1784d9562eb3d699
340580104677ecea
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
Venezuela
N/A
36
N/A
Executable
f4f1220f50582f29
386ac3d8762a707b
e8664bf0
39a6f794d8118edd
424cf7605dc48295
Virus.Win32.
Virut.Ce
No
N/A
N/A
Pakistan
N/A
37
Microsoft Corporation
Executable
7e0d9df465febd3e
c5865efe60545262
9e618b1b
23c3c5ead46a723d
935b9ee3f01a974d
Virus.Win32.
Virut.CE
No
7.00.7600.
16385
(win7_rtm.
090713-125
5)
7.00.7600.
16385
Indonesia
N/A