What is Hkcmd.exe

HotKeysCmds - Intel(R) Common User Interface - Intel Corporation

File description

Hkcmd.exe with description HotKeysCmds is a process file from company Intel Corporation belonging to product Intel(R) Common User Interface.
The file is digitally signed from Intel Corporation - VeriSign Time Stamping Services Signer - G2
We do not recommend removing digitally signed files from Intel Corporation

What is hkcmd.exe?
Hkcmd.exe is the Intel Hotkey Command Module. It is installed with the Intel graphics and chipset drivers and provides support for various hotkeys to allow you to quickly change your graphics settings.

This process is a nonessential process and can safely be terminated. To disable the Intel Hotkey Command Module, open your display properties control panel and disable hotkeys. By disabling it, you will lose the ability to use the hotkeys defined in the settings for the Intel Hotkey Command Module.

Dangers of hkcmd
As this is a relatively common legitimate process with a cryptic name, it is common for virus writers and spyware vendors to disguise their malware as the genuine hkcmd.exe.

Some malicious files will have the same name but will be stored somewhere other than in %SystemRoot%\System32. Other malware will use a name that appears similar to it but with slight differences in spelling or with appended digits. The following malware is known to disguise itself as the Intel Hotkey Command Module:
  • W32/Sdbot-DGR (%SystemRoot%)
    • This is a worm that spreads via network shares and KaZaA that can communicate with a remote server via HTTP.
  • W32/Pahatia-A (%SystemRoot%)
    • This is a worm that spreads via removable drives (e.g., USB flash drives and hard drives) that periodically attempts to kill critical system processes as well as other common processes.
There is typically only one instance of this process running at a given time. The presence of multiple instances may be an indicator of a malware infection.

Common problems
  • Hkcmd.exe crashes after installation of Windows XP Service Pack 2
    • This is a known issue. Reinstall your Intel graphics card and chipset drivers.
  • Hkcmd.exe tries to connect to microsoft.com
    • This is a known issue that is apparently by design. You can choose to block access or disable the Hotkey Command Module as described above.
  • Hkcmd.exe uses 100% CPU time
    • This can be caused by a damaged installation of your Intel drivers. Try reinstalling them.
    • If this does not correct the problem, disable the Hotkey Command Module as described above.

Automatic startup locations

 
001 Running Processes
002 Autorun registry entries local machine
003 Autorun registry entries Current User
004 All users startup startmenu
005 Current user startup startmenu
006 Start Menu\Programs\Startup
007 Roaming Start Menu\Programs\Startup
008 Autorun registry entries Default user
009 Autorun registry entries SYSTEM user
010 Installed services
011 Installed drivers
012 Autorun registry entries S-1-5-XX users
030 Installed protocol filters
031 Installed protocol handlers
033 Winlogon Userinit
034 Winlogon Shell
035 Active Setup Installed Components
036 Internet Explorer Components
037 Winlogon System
038 Winlogon Taskman
040 Internet Explorer UrlSearchHooks
041 Internet Explorer Toolbars
042 HKLM Internet Explorer Extensions
043 HKCU Internet Explorer Extensions
044 Internet Explorer\Toolbar\ShellBrowser
045 Internet Explorer\Toolbar\WebBrowser
050 Explorer ShellExecuteHooks
051 Explorer SharedTaskScheduler
052 Explorer Browser Helper Objects (BHO)
060 Shell ServiceObjectDelayLoad
061 Shell Approved Extensions
062 Shell ColumnHandlers
063 BootExecute
064 Known Dll's
065 Image File Execution Options (debugger)
067 Winlogon notify
069 Print monitors
070 Authentication Packages
071 Notification Packages
072 Security Packages
073 %windir%\Tasks
091 HKCU Scripts\logon
092 HKLM Scripts\Startup
093 HKLM Scripts\Shutdown
094 HKCU Scripts\Logoff
102 Explorer Bars
103 Downloaded program files
104 ActiveX controls (Distribution Units)
107 NameSpace Catalog
121 AppInit_DLLs
136 Local Machine Runonce (+subkeys)
139 Windows\load
145 UpperFilters
146 AlternateShell
147 SecurityProviders
149 Wow wowcmdline
153 HKLM Drivers32\Midi
166 HKCU Policies\Explorer\Run
167 HKLM Policies\Explorer\Run
171 Screensaver
172 NetworkProvider order
173 ContextMenuHandlers
176 AeDebug\Debugger
210 MyComputer\BackupPath
212 MyComputer\DefragPath
213 Accessibility\Utility Manager\Magnifier
215 Accessibility\Utility Manager\On-Screen Keyboard
221 HKLM *\ShellEx\ContextMenuHandlers
223 HKLM AllFileSystemObjects\ShellEx\ContextMenuHandlers
225 HKCU Folder\ShellEx\ContextMenuHandlers
227 HKLM Directory\ShellEx\ContextMenuHandlers
229 HKLM Directory\Background\ShellEx\ContextMenuHandlers
231 HKLM Folder\Shellex\ColumnHandlers
251 HKLM Directory\Shellex\DragDropHandlers
253 HKLM Directory\Shellex\PropertySheetHandlers
254 HKCU Directory\Shellex\CopyHookHandlers

Digital signatures found for this file

    Certificate 
1181 Intel Corporation - VeriSign Time Stamping Services Signer - G2
222 Intel Corporation - Software and Firmware Products - Symantec Time Stamping Services Signer - G4
87 Intel Corporation - Symantec Time Stamping Services Signer - G3
81 Microsoft Windows Hardware Compatibility Publisher - VeriSign Time Stamping Services Signer
64 Intel Corporation - VeriSign Time Stamping Services Signer
45 Intel Corporation - pGFX - Symantec Time Stamping Services Signer - G4
44 Microsoft Windows Hardware Compatibility Publisher - Microsoft Time-Stamp Service
36 Microsoft Windows Hardware Compatibility Publisher - VeriSign Time Stamping Service
33 Microsoft Windows Hardware Compatibility Publisher - Microsoft Timestamping Service
18 Intel Corporation - Software and Firmware Products - Symantec Time Stamping Services Signer - G3
13 Intel Corporation - pGFX - Symantec Time Stamping Services Signer - G3
2 Intel Corporation - pGFX - GlobalSign TSA for MS Authenticode - G2
2 Intel Corporation - pGFX - GlobalSign TSA for MS Authenticode - G1
1 NVIDIA Corporation - VeriSign Time Stamping Services Signer - G2
1 Intel(R) pGFX - Timestamp.intel.com

MD5 security rating in our database

482 files (Not yet rated and not signed)
166 files (Not yet rated and digitally signed)
7 files (Safe and not signed)
1698 files (Safe and digitally signed)
Some versions of this filename have not yet been checked for safety.
Warning: Some malware might rename itself to hkcmd.exe. Always make sure that your file is from a verified publisher.

User ratings for this file

File rating: Average rating of hkcmd.exe: by 2353 files and users.

Application errors

Fix hkcmd.exe application error:  Run a FREE registry scan

User comments

Part of Intel Extreme Graphics 2 (82852 82855 GM GME) driver on my laptop.


Please add your comments if you have more information about this file or if you know how to solve hkcmd.exe application errors.


File safety :

File security rating :

Are you human? How much is 12+8:


Like this page?

Please support this free service by giving us a Google+1


Browse files by letter

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

More system processes

hkcontrol.exe hkcu.exe HKCU_ADOBE_ACROBAT_PRO_7_EN.exe
HKCU_HYPERSNAP_6_EN.exe HKCU_LOTUS_SMARTSUITE_98_EN.exe HKCU_MS_OFFICE_PRO_2003r2_EN.exe
HKCU_MS_VISIO_PRO_2003r2_EN.exe hkcu_sp2.exe hkdpmjng.dll
hkdrv.sys hkex.sys HKExt3.exe

Lansweeper computer inventory From the creator of Runscanner:

Lansweeper
is an automated IT asset management tool. It can quickly scan your computers and has over 250 default reports available.

There is no need to install any agents on the scanned computers, all hardware and software inventory scanning is done by standard build-in functionality.