Should I block it?

40%
40% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

1.1.42.70 2.50%
1.1.42.70 2.50%
1.0.55.21 2.50%
1.0.55.19 15.00%
1.0.54.17 7.50%
1.0.42.35 12.50%
1.0.42.35 20.00%
1.0.40.85 10.00%
1.0.40.85 10.00%
1.0.40.23 2.50%
1.0.19.0 15.00%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegEnumKeyExW, RegSetValueExW, RegCreateKeyExW, RegEnumValueW, ConvertSidToStringSidW, OpenProcessToken, GetTokenInformation, StartServiceCtrlDispatcherW, CreateServiceW, CloseServiceHandle, DeleteService, OpenSCManagerW, OpenServiceW, ChangeServiceConfig2W, StartServiceW, ControlService, RegQueryValueExW, RegDeleteKeyW, RegDeleteValueW, SetServiceStatus, RegOpenCurrentUser, RegOpenKeyExW, RegisterServiceCtrlHandlerW, RegCloseKey, RegOpenKeyW
kernel32.dll
lstrcmpiW, GetLastError, lstrlenW, ReleaseMutex, DeleteFileW, GetModuleFileNameW, Sleep, GetTickCount, GetLogicalDriveStringsW, GetDriveTypeW, CreateMutexW, InterlockedDecrement, HeapReAlloc, HeapAlloc, GetCurrentProcess, HeapFree, GetModuleHandleW, GetProcessHeap, GetFileAttributesW, CreateFileW, lstrcmpW, GetLongPathNameW, GetProcAddress, RemoveDirectoryW, CloseHandle, LocalFree, SetFileAttributesW, ExpandEnvironmentStringsW, GetLogicalDrives, QueryDosDeviceW, lstrcpyW, GetEnvironmentVariableW, FindFirstFileW, FindClose, FindNextFileW, WideCharToMultiByte, MultiByteToWideChar, SetLastError, TerminateProcess, GetCurrentProcessId, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCommandLineA, VirtualAlloc, GetSystemTimeAsFileTime, ExitProcess, RaiseException, RtlUnwind, EnterCriticalSection, LeaveCriticalSection, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, GetCurrentThreadId, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, DeleteCriticalSection, WriteFile, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapCreate, VirtualFree, QueryPerformanceCounter, HeapSize, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, LCMapStringA, LCMapStringW, ReadFile, SetFilePointer, GetConsoleCP, GetConsoleMode, GetStringTypeW, GetStringTypeA, LoadLibraryA, InitializeCriticalSectionAndSpinCount, CreateFileA, SetStdHandle, FlushFileBuffers, GetLocaleInfoA, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, GetModuleHandleA, SetEndOfFile, InterlockedExchange, InitializeCriticalSection
ole32.dll
CoTaskMemFree, CoCreateInstance
user32.dll
wsprintfW

SH4Service.exe

SpyHunter4 by Enigma Software Group USA (Signed)

Remove SH4Service.exe
Version:   1.0.42.35
MD5:   b7a8148ca23c6a55712002ed317a75d9
SHA1:   b30cefe0b462d5a0513cc766012b1a42b3a46dd0
SHA256:   12fe891b21e7c3cec2954b5d24f8de82a728506a188ab3f3949fb5e3185bc218

What is SH4Service.exe?

Service scanner interface is part of the Enigma SpyHunter software program. SpyHunter is an antivirus and antispyware program designed to find and remove malware.

About SH4Service.exe (from Enigma Software Group USA)

SpyHunter is a powerful, real-time anti-spyware application certified by West Coast Labs’ Checkmark Certification System and designed to assist the average computer user in protecting their PC from ma

DetailsDetails

File name:SH4Service.exe
Publisher:Enigma Software Group USA, LLC.
Product name:SpyHunter4
Description:Service scanner interface
Typical file path:C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe
Original name:Service.exe
File version:1.0.42.35
Product version:4.11.10.4138
Size:748.44 KB (766,400 bytes)
Certificate
Issued to:Enigma Software Group USA
Authority (CA):VeriSign
Digital DNA
File packed:No
Code language:Microsoft Visual C# / Basic .NET
.NET CLR:Yes
.NET NGENed:No
More details

ResourcesPrograms

The following programs will install this file
Enigma Software Group
41% remove
SpyHunter is an antivirus program that also includes its built in 'registry cleaner', Reghunter. It also may be bundled with 3rd party pay per install programs such as InstallIQ.

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'SpyHunter 4 Service'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00513481%
0.028634%
Kernel CPU:0.00427164%
0.013761%
User CPU:0.00086317%
0.014873%
Kernel CPU time:30 ms/min
100,923,805ms/min
Memory
Private memory:914 KB
21.59 MB
Private (maximum):3.01 MB
Private (minimum):825 KB
Non-paged memory:914 KB
21.59 MB
Virtual memory:23.82 MB
140.96 MB
Virtual memory (peak):27.62 MB
169.69 MB
Working set:1013 KB
18.61 MB
Working set (peak):3.13 MB
37.95 MB
Resource allocations
Threads:3
12
Handles:62
600
GUI GDI count:4
103
GUI USER count:1
49

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:C:\progra~1\enigma~1\spyhun~1\sh4ser~1.exe
Owner:SYSTEM
Windows Service
Service name:SpyHunter 4 Service
Description:“SpyHunter 4 Helper Service”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
SH4Service.exe (SpyHunter4 by Enigma Software Group USA, LLC)
Total CPU:0.00620386%
0.272967%
Kernel CPU:0.00519311%
0.107585%
User CPU:0.00101076%
0.165382%
CPU cycles:87,393/sec
5,741,424/sec
Memory:764 KB
1.16 MB
advapi32.dll (Advanced Windows 32 Base API by Microsoft)
Total CPU:0.00005120%
Kernel CPU:0.00000000%
User CPU:0.00005120%
Memory:620 KB
sechost.dll
Total CPU:0.00002757%
Kernel CPU:0.00000689%
User CPU:0.00002067%
CPU cycles:13,182/sec
Memory:100 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 40.00%
Windows 7 Home Premium 27.50%
Microsoft Windows XP 15.00%
Windows 7 Ultimate N 10.00%
Windows 7 Professional 5.00%
Windows Vista Ultimate 2.50%

Distribution by countryDistribution by country

United States installs about 36.84% of SpyHunter4.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 35.29%
Sony 23.53%
Hewlett-Packard 17.65%
ASUS 11.76%
GIGABYTE 5.88%
American Megatrends 5.88%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE