SpyHunter

Friday, May 28, 2004 Lavasoft stated in their press release that SpyHunter from Enigma Software Group Inc was included in Ad-Aware's detection database. This write-up will summarize some of the concerns that has been raised about SpyHunter and Enigma Software Group Inc.

Lavasoft's press release criticize SpyHunter mainly because of the undisclosed transmission of the Microsoft Windows Product ID to Enigma's server every time the SpyHunter software checks for an update. Lavasoft also criticize the the marketing methods used by Enigma: "Enigma Software Group also uses questionable methods to market their software SpyHunter. Their pop-up ads resemble virus alerts from well-known anti-virus programs, and DOS windows displaying fake scan results." Source

Enigma's marketing methods has also been documented at spywareinfo.com and about.com. jurgita.com, one of Enigma's affiliates, was also displaying pop-up windows with a fake "Spyware detected" message. We have mirrored a few examples of the pop-ups:

Example 1
Example 2
Example 3
Example 4

jurgita.com removed this false advertising shortly after it came to attention in a forum discussion at spywarewarrior.com.

The SpyHunter EULA now disclose that the software is sending the Windows Product ID: "If you push the UPGRADE button on the free scanner it will send us the username and password that you have entered into SpyHunter along with the SpyHunter version number, and a randomly generated number. The username and password are used only to check for a valid registration. The SpyHunter version number is used only to determine which update to transmit. For this reason we also check the version number when you push the UPDATE button. The randomly generated number is used only to prevent caching of the SpyHunter upgrade installation file. None of this information is shared with any third parties. 2.6 Anti Piracy. Section 2.6 applies to the Full Version of SpyHunter only which applies to users who have paid for a license. When updating our program through the UPDATE button on the user interface, your system will send to us your Windows Product ID number, Spyhunter Version number, and the username and password that you have entered when registering SpyHunter We check this number against your registration information to verify that your license is valid for purposes of the update. This number is not used for any purpose other than validating your license, and the information is not shared with any third parties." Source

SpyHunter is dectected by Ad-Aware reference file 01R325.27.06.2004.

Classification

Files

SpyHunter.exe, def.dat, settings.ini, help.rtf, purl.dat, install.sss

If you have any of the files related to SpyHunter on your system, please send them for additional analysis. Generally, I have only analysed a few versions for each software component listed at this web site. With your help I will be able to look at both old and more recent versions of the SpyHunter software. Thank you very much for your time!

Vendor

End User License Agreement

Detection

I'm looking for your help!

Thank you for using my site, I hope you find it useful. I'm looking for help from all users, please read more.

Contact information for SpyHunter's vendor

In order to provide correct, accurate and updated information about SpyHunter I encourage the vendor to contact me if any part of this write-up needs a revision.