SpyHunter

SpyHunter

by Enigma Software Group

What is SpyHunter?

SpyHunter is software application developed by Enigma Software Group. It is most commonly found on computers running Windows 7 with nearly 60.55% of installations running this operating system. SpyHunter's installer is typically 48.00 MB in size and installs around 42 files. The most common release is 4.17.6.4336 with 40.46% of all installations currently using this version.

SpyHunter is most popular in the United States with 36.10% of installations residing in this country.

SpyHunter adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, SpyHunter is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About SpyHunter?

SpyHunter is a comprehensive antivirus program with an integrated registry cleaner, Reghunter. It provides advanced protection against malware, viruses, and other online threats. Additionally, it may be bundled with third-party pay-per-install programs such as InstallIQ.

Software Behaviors

Services:
  • SH4Service.exe runs as a service named 'SpyHunter 4 Service' (SpyHunter 4 Service) "SpyHunter 4 Helper Service".
Firewall:
  • SpyHunter4.exe is added as a firewall exception for 'C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe'.
  • SpyHunter3.exe is added as a firewall exception for 'C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe'.
Scheduled tasks:
  • SpyHunter4.exe is scheduled as a task named 'SpyHunter4'.
  • SH4Service.exe is scheduled as a task named 'SDMsgUpdate (TE)' (runs daily at 04:37).
  • SpyHunter3.exe is scheduled as a task named 'SpyHunter Scanner' (runs weekly on Fridays at 02:15).

Startup Entries

Startup tasks:
  • SpyHunter4.exe is automatically launched at startup through a scheduled task named SpyHunter4Startup.
  • SH4Service.exe is automatically launched at startup through a scheduled task named SDMsgUpdate (TE).
  • ESGRKCHK.exe is automatically launched at startup through a scheduled task named Express DownloaderUpdate.
  • SpyHunter3.exe is automatically launched at startup through a scheduled task named SpyHunter3.
Registry entries:
  • SH4Service.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MaxDownloadMgr' and executes as "C:\users\user\appdata\Local\Temp\StpA67B_TMP.EXE".
  • SpyHunter4.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'SpyHunter' and executes as "C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe".

Software Details

URL:
https://www.enigmasoftware.com/products/spyhunter
Support:
https://www.enigmasoftware.com/support
Installation path:
C:\Program Files\Enigma Software Group\SpyHunter\
Uninstaller:
MsiExec.exe /X{83B952C7-F8F3-4CA3-B4C5-33C85B24E478}
Size:
48.00 MB
Language:
English

SpyHunter Executable Details

Primary executable:
SpyHunter4.exe
Name:
SpyHunter
Path:
C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
MD5:
–
SHA-1:
–
SHA-256:
–
Files installed by SpyHunter
File Type Filename MD5
EXE
uninstall.exe
2a929259033b4b644ef1ed9accfca223
DLL
Common.dll
9fd2e2415d5cd2db727380159197614d
EXE
Updater.exe
106556f40e0366b98ff715462aa3c3e5
DLL
Updater.dll
fc6fc9feb16824634e3c1e011e829f62
DLL
Core.dll
4c5b2d6446835810e1216644fd54fb83
EXE
xdelta.exe
a1e2a6e8e54f42b9d6ec587411c8cd8e
DLL
Language.dll
fdfffd7d89a1638fa16fde5578be0c3e
DLL
Scheduler.dll
3c0287552b80329589fe1f4444472b41
EXE
native.exe
5f5bc9fc260f181c0390c09b960be1f4
DLL
Scanner.dll
279fe921560a906f827f1f13afb461c8