84,488,480 programs installed

Should I remove SpyHunter?

What percent of users and experts removed it?
41% remove it59% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #1,220
United States Rank #1,737
Reach 0.5644%
Lifespan of installation (until removal)
< 21.39 days
631.11 days >
Average installed length: 331.60 days


VersionDistribution 0.05% 40.46% 11.08% 10.15% 6.08% 5.47% 6.83% 1.47% 0.83% 0.49% 0.26% 0.19% 0.75% 0.32% 0.02% 0.78% 0.02% 0.02% 0.01% 0.17% 0.01% 0.02%
4.1.11 13.88%
4.0.51 0.02%
3.12 0.15%
3.10 0.10%
3.8 0.01%
3.7 0.34%
3.6 0.01%
3.5 0.01%
3.4 0.02%

Other programs by Enigma Software Group


What is SpyHunter?

SpyHunter is an antivirus program that also includes its built in 'registry cleaner', Reghunter. It also may be bundled with 3rd party pay per install programs such as InstallIQ.

About  (from Enigma Software Group)

SpyHunter is a powerful, real-time anti-spyware application certified by West Coast Labs’ Checkmark Certification System and designed to assist the average computer user in protecting their PC from malicious threats. SpyHunter is automatically configured to give you optimal protection with limited interaction, so all y...  Read more


The most common release is, with over 98% of all installations currently using this version. During setup, the program creates a startup registration point in Windows in order to automatically start when any user boots the PC. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The primary executable is named spyhunter4.exe. The setup package generally installs about 46 files and is usually about 48.46 MB (50,814,480 bytes). The installed file EnigmaUpdater.dll is the auto-update component of the program which is designed to check for software updates and notify and apply them when new versions are discovered.
SpyHunter has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: Enigma Software Group USA, LLC
URL: www.enigmasoftware.com/products/spyhunter
Help link: www.enigmasoftware.com/support
Installation folder: C:\Program Files\Enigma Software Group\SpyHunter\
Uninstaller: MsiExec.exe /X{83B952C7-F8F3-4CA3-B4C5-33C85B24E478}
(The Windows Installer is used for the installation, maintenance, and removal.)
Estimated size: 48.46 MB
Language: English (United States)

Program filesFiles installed by SpyHunter

Program executable:spyhunter4.exe
SpyHunter4 application
Signed by:Enigma Software Group USA
Path:C:\Program Files\enigma software group\spyhunter\spyhunter4.exe
SpyHunter4 application is part of the Enigma SpyHunter software program. SpyHunter is an antivirus and antispyware program designed to find and remove malware.
Additional files:
  • SpyHunter-Installer.exe - SpyHunter Downloader
  • ESGScanner.sys - File read driver (Enigma file read driver)
  • ActiveKill.dll - SpyHunter3
  • ActiveXKill.dll
  • br.exe - Batch Remover
  • Common Original.dll
  • Common.dll - SpyHunter4 (Common interface)
  • Defman.dll - Definitions manager
  • EnigmaUpdater.dll
  • ESGRKCHK.exe - ESG Rootkit detection toolkit
  • ExecutionGuard.dll - Execution Guard
  • HelpDesk.dll
  • HFMonitor.dll
  • Language.dll
  • NetworkSentry.dll
  • Options.dll - Options
  • ProcessGuard.dll - ProcessGuard
  • RegistryGuard.dll - RegistryGuard
  • Scanner.dll - Scanner
  • Scheduler.dll
  • SH4Service.exe - Service scanner interface
  • ShScanner.dll - Sh scanner
  • SpyHunter3.exe
  • Updater.dll
  • WSAMonitor.dll
  • пкунк54.exe
  • Updater.exe - SpyHunter
  • spyhunterS.exe - SpyHunter
  • spyhunterS4.exe
  • Uninstall.exe
  • native.exe

Program behaviorsBehaviors exhibited

3 Scheduled Tasks
  • SpyHunter4.exe is scheduled as a task named 'SpyHunter4'.
  • SH4Service.exe is scheduled as a task named 'SDMsgUpdate (TE)' (runs daily at 04:37).
  • SpyHunter3.exe is scheduled as a task named 'SpyHunter Scanner' (runs weekly on Fridays at 02:15).
4 Scheduled Tasks (Boot/Login)
  • SpyHunter4.exe is automatically launched at startup through a scheduled task named SpyHunter4Startup.
  • SH4Service.exe is automatically launched at startup through a scheduled task named SDMsgUpdate (TE).
  • ESGRKCHK.exe is automatically launched at startup through a scheduled task named Express DownloaderUpdate.
  • SpyHunter3.exe is automatically launched at startup through a scheduled task named SpyHunter3.
  • SH4Service.exe runs as a service named 'SpyHunter 4 Service' (SpyHunter 4 Service) "SpyHunter 4 Helper Service".
2 Startup Files (User Run)
  • SH4Service.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MaxDownloadMgr' and executes as "C:\users\user\appdata\Local\Temp\StpA67B_TMP.EXE".
  • SpyHunter4.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'SpyHunter' and executes as "C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe".
4 Startup Files (All Users Run)
  • SpyHunter4.exe is loaded in the all users (HKLM) registry as a startup file name 'SpyHunter Security Suite' which loads as C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe.
  • SH4Service.exe is loaded in the all users (HKLM) registry as a startup file name 'FromDocToPDF Home Page Guard 64 bit' which loads as "C:\Program Files2\FROMDO~2\bar\1.bin\AppIntegrator64.exe".
  • SpyHunter3.exe is loaded in the all users (HKLM) registry as a startup file name 'SpyHunter Security Suite' which loads as C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe.
  • ESGRKCHK.exe is loaded in the all users (HKLM) registry as a startup file name 'SmartAudio' which loads as C:\Program Files\CONEXANT\SAII\SAIICpl.exe /t.
2 Windows Firewall Allowed Programs
  • SpyHunter4.exe is added as a firewall exception for 'C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe'.
  • SpyHunter3.exe is added as a firewall exception for 'C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter3.exe'.

Program resource utilizationResource utilization averages

Memory:230.42 MB
21.09 MB average
Total CPU:0.0000906579%
0.031193% average
Kernel CPU:0.00003001%
0.016088% average
User CPU:0.00006065%
0.015104% average
70 average
Memory:688 KB
Total CPU:0.0002682987%
Kernel CPU:0.00013911%
User CPU:0.00012918%

How do I remove SpyHunter?

You can uninstall SpyHunter from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program SpyHunter, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove SpyHunter.

Win 7 (SP1) 56%
Win 8.1 0%
Automatically starts? Yes
(Found in the run registry)
Uninstall it 41%
Keep it 59%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 60.55%
Windows 10 28.21%
Windows XP 5.92%
Windows Vista 5.25%
Windows Server 2003 0.06%
Which OS releases does it run on?
Windows 7 Home Premium 30.93%
Windows 7 Ultimate 16.22%
Windows 7 Professional 10.15%
Windows 8.1 9.14%
Microsoft Windows XP 5.91%
Windows 8.1 Pro 4.81%

Distribution by countryGeography

36.10% of installs come from the United States
Which countries install it?
  United States 36.10%
  Italy 7.22%
  Brazil 4.95%
  Netherlands 4.90%
  United Kingdom 4.72%
  Germany 3.98%
  France 3.17%
  Canada 2.68%
  Spain 2.29%
  Australia 2.23%
  Belgium 2.10%
  Sweden 1.97%
  Poland 1.45%
  Mexico 1.00%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 25.59%
Dell 20.64%
Acer 18.85%
ASUS 10.55%
Toshiba 6.53%
Samsung 4.32%
Lenovo 3.52%
Intel 1.58%
American Megatrends 1.00%
Sahara 0.77%
Medion 0.75%
Common models
HP Pavilion dv6 Notebook ... 7.70%
HP Pavilion g6 Notebook P... 5.95%
HP Pavilion dv7 Notebook ... 4.35%
ASUS All Series 3.80%
HP Pavilion g7 Notebook P... 2.50%
Dell Inspiron 1545 2.50%

About (from Enigma Software Group)

Enigma Software Group USA LLC (”ESG”) is a privately-held international systems integrator and developer of PC security software, with offices in the United States, and the European Union (Lithuania & Bulgaria).
Publisher URL: www.enigmasoftware.com

comments3 comments

user comment
user comment
camover a year ago
I removed it because I didn't like it. It took so long to scan and kept messing other things up. Wouldn't let me do things that I wanted to, and I don't want to pay for it.
user comment
GCover a year ago
This does find and remove spyware and adware that is not detected by other programmes but it is fairly expensive annually as you still need a main all-purpose anti-virus software
user comment
0531Lindaover a year ago
It doesn't remove it - going into computer/program files/enigma software group and trying to remove is not an option either - nor is going through the C:/ and trying to delete from there. It's crap!