SpyHunter

SpyHunter

by Enigma Software Group

What is SpyHunter?

SpyHunter is software application developed by Enigma Software Group. It is most commonly found on computers running Windows 7 with nearly 60.55% of installations running this operating system. SpyHunter's installer is typically 48.00 MB in size and installs around 42 files. The most common release is 4.17.6.4336 with 40.46% of all installations currently using this version.

SpyHunter is most popular in the United States with 36.10% of installations residing in this country.

SpyHunter adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, SpyHunter is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About SpyHunter?

SpyHunter is a comprehensive antivirus program with an integrated registry cleaner, Reghunter. It provides advanced protection against malware, viruses, and other online threats. Additionally, it may be bundled with third-party pay-per-install programs such as InstallIQ.

Software Behaviors

Services:
  • SH4Service.exe runs as a service named 'SpyHunter 4 Service' (SpyHunter 4 Service) "SpyHunter 4 Helper Service".
Firewall:
  • SpyHunter4.exe is added as a firewall exception for 'C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe'.
  • SpyHunter3.exe is added as a firewall exception for 'C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe'.
Scheduled tasks:
  • SpyHunter4.exe is scheduled as a task named 'SpyHunter4'.
  • SH4Service.exe is scheduled as a task named 'SDMsgUpdate (TE)' (runs daily at 04:37).
  • SpyHunter3.exe is scheduled as a task named 'SpyHunter Scanner' (runs weekly on Fridays at 02:15).

Startup Entries

Startup tasks:
  • SpyHunter4.exe is automatically launched at startup through a scheduled task named SpyHunter4Startup.
  • SH4Service.exe is automatically launched at startup through a scheduled task named SDMsgUpdate (TE).
  • ESGRKCHK.exe is automatically launched at startup through a scheduled task named Express DownloaderUpdate.
  • SpyHunter3.exe is automatically launched at startup through a scheduled task named SpyHunter3.
Registry entries:
  • SH4Service.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MaxDownloadMgr' and executes as "C:\users\user\appdata\Local\Temp\StpA67B_TMP.EXE".
  • SpyHunter4.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'SpyHunter' and executes as "C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe".

Software Details

URL:
https://www.enigmasoftware.com/products/spyhunter
Support:
https://www.enigmasoftware.com/support
Installation path:
C:\Program Files\Enigma Software Group\SpyHunter\
Uninstaller:
MsiExec.exe /X{83B952C7-F8F3-4CA3-B4C5-33C85B24E478}
Size:
48.00 MB
Language:
English

SpyHunter Executable Details

Primary executable:
SpyHunter4.exe
Name:
SpyHunter
Path:
C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
MD5:
SHA-1:
SHA-256:
Files installed by SpyHunter
File Type Filename MD5
EXE
5f242e1a03aca19044bc55f9c0da747b
DLL
4d61258bb03de4dee5aea7f315f805e5
DLL
a6c6fae7ab6c5df30c1a3882761e6dd0
DLL
b72d96c1373dafcd2c08b479a925b64d
DLL
f76963db90df95da15726f1f96d4a483
DLL
7dcf481c24d977ac7b9692da08d5640d
EXE
600ce94c2d0c1eb2b338188c48c89a05
SYS
ef5e6ca0a962a9fb572c90e20d417893
DLL
e06f5096736e3004d13150d7151c0cf2
DLL
f7cd0d9302b875f09a93ff729b574ebd