SpyHunter
What is SpyHunter?
SpyHunter is software application developed by Enigma Software Group. It is most commonly found on computers running Windows 7 with nearly 60.55% of installations running this operating system. SpyHunter's installer is typically 48.00 MB in size and installs around 42 files. The most common release is 4.17.6.4336 with 40.46% of all installations currently using this version.
SpyHunter is most popular in the United States with 36.10% of installations residing in this country.
SpyHunter adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, SpyHunter is known to create 2 firewall exceptions to allow inbound and outbound connectivity.
About SpyHunter?
SpyHunter is a comprehensive antivirus program with an integrated registry cleaner, Reghunter. It provides advanced protection against malware, viruses, and other online threats. Additionally, it may be bundled with third-party pay-per-install programs such as InstallIQ.
Software Behaviors
- Services:
-
- SH4Service.exe runs as a service named 'SpyHunter 4 Service' (SpyHunter 4 Service) "SpyHunter 4 Helper Service".
- Firewall:
-
- SpyHunter4.exe is added as a firewall exception for 'C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe'.
- SpyHunter3.exe is added as a firewall exception for 'C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe'.
- Scheduled tasks:
-
- SpyHunter4.exe is scheduled as a task named 'SpyHunter4'.
- SH4Service.exe is scheduled as a task named 'SDMsgUpdate (TE)' (runs daily at 04:37).
- SpyHunter3.exe is scheduled as a task named 'SpyHunter Scanner' (runs weekly on Fridays at 02:15).
Startup Entries
- Startup tasks:
-
- SpyHunter4.exe is automatically launched at startup through a scheduled task named SpyHunter4Startup.
- SH4Service.exe is automatically launched at startup through a scheduled task named SDMsgUpdate (TE).
- ESGRKCHK.exe is automatically launched at startup through a scheduled task named Express DownloaderUpdate.
- SpyHunter3.exe is automatically launched at startup through a scheduled task named SpyHunter3.
- Registry entries:
-
- SH4Service.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MaxDownloadMgr' and executes as "C:\users\user\appdata\Local\Temp\StpA67B_TMP.EXE".
- SpyHunter4.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'SpyHunter' and executes as "C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe".
Software Details
- URL:
- https://www.enigmasoftware.com/products/spyhunter
- Support:
- https://www.enigmasoftware.com/support
- Installation path:
- C:\Program Files\Enigma Software Group\SpyHunter\
- Uninstaller:
- MsiExec.exe /X{83B952C7-F8F3-4CA3-B4C5-33C85B24E478}
- Size:
- 48.00 MB
- Language:
- English
SpyHunter Executable Details
- Primary executable:
- SpyHunter4.exe
- Name:
- SpyHunter
- Path:
- C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
- MD5:
- –
- SHA-1:
- –
- SHA-256:
- –
| File Type | Filename | MD5 |
|---|---|---|
|
EXE
|
6b24359befa9e98ee79cff45a00feee7 | |
|
DLL
|
19958fb4d45fce40c702e3ee2146842d | |
|
DLL
|
7c131112c07b3bacaea6cb5e501d2bfa | |
|
SYS
|
3b32caa07d672f8a2e0df5cb3a873f45 | |
|
EXE
|
3870acab64592786705616a23cbdae3f | |
|
DLL
|
407192f484a9385883bd7232f0e9cc83 | |
|
EXE
|
d480f4069bfcd9acc3e7399317038ccf | |
|
DLL
|
f948351e27f4f8974c76c8bdbf1ac636 | |
|
EXE
|
70762bdd441d7cd369318b4faffc4589 | |
|
EXE
|
ecb2400634d64d456544e960b81c054d |