File description |
Hkcmd.exe with description hkcmd Module is a process file from company Intel Corporation belonging to product Intel(R) Common User Interface.
The file is
digitally signed from Intel Corporation - VeriSign Time Stamping Services Signer
We do not recommend removing digitally signed files from Intel Corporation
What is hkcmd.exe?
Hkcmd.exe is the Intel Hotkey Command Module. It is installed with the Intel graphics and chipset drivers and provides support for various hotkeys to allow you to quickly change your graphics settings.
This process is a nonessential process and can safely be terminated. To disable the Intel Hotkey Command Module, open your display properties control panel and disable hotkeys. By disabling it, you will lose the ability to use the hotkeys defined in the settings for the Intel Hotkey Command Module.
Dangers of hkcmd
As this is a relatively common legitimate process with a cryptic name, it is common for virus writers and spyware vendors to disguise their malware as the genuine hkcmd.exe.
Some malicious files will have the same name but will be stored somewhere other than in %SystemRoot%\System32. Other malware will use a name that appears similar to it but with slight differences in spelling or with appended digits. The following malware is known to disguise itself as the Intel Hotkey Command Module:
- W32/Sdbot-DGR (%SystemRoot%)
- This is a worm that spreads via network shares and KaZaA that can communicate with a remote server via HTTP.
- W32/Pahatia-A (%SystemRoot%)
- This is a worm that spreads via removable drives (e.g., USB flash drives and hard drives) that periodically attempts to kill critical system processes as well as other common processes.
There is typically only one instance of this process running at a given time. The presence of multiple instances may be an indicator of a malware infection.
Common problems
- Hkcmd.exe crashes after installation of Windows XP Service Pack 2
- This is a known issue. Reinstall your Intel graphics card and chipset drivers.
- Hkcmd.exe tries to connect to microsoft.com
- This is a known issue that is apparently by design. You can choose to block access or disable the Hotkey Command Module as described above.
- Hkcmd.exe uses 100% CPU time
- This can be caused by a damaged installation of your Intel drivers. Try reinstalling them.
- If this does not correct the problem, disable the Hotkey Command Module as described above.
|
Automatic startup locations |
 |
001 Running Processes |
 |
002 Autorun registry entries local machine |
|
003 Autorun registry entries Current User |
|
Digital signatures found for this file |
| |
Signer of certificate |
Issuer of certificate |
 |
Intel Corporation |
VeriSign Time Stamping Services Signer |
|
Intel Corporation |
VeriSign Time Stamping Services Signer - G2 |
|
Microsoft Windows Hardware Compatibility Publisher |
Microsoft Time-Stamp Service |
|
Microsoft Windows Hardware Compatibility Publisher |
Microsoft Timestamping Service |
|
Microsoft Windows Hardware Compatibility Publisher |
VeriSign Time Stamping Service |
|
Microsoft Windows Hardware Compatibility Publisher |
VeriSign Time Stamping Services Signer |
|
NVIDIA Corporation |
VeriSign Time Stamping Services Signer - G2 |
|
|
MD5 security rating in our database |
 |
 |
|
325 |
files (Not yet rated
and
not
signed) |
|
|
1 |
files (Not yet rated
and
digitally
signed) |
 |
|
9 |
files (Safe
and
not
signed) |
|
|
959 |
files (Safe
and
digitally
signed) |
|
|
|
Some versions of this filename have not yet been checked for safety.
|
| Warning: Some malware might rename itself to hkcmd.exe. Always make sure that your file is from a verified publisher. |
|
Application errors |
|
| User comments. |
 |
Part of Intel Extreme Graphics 2 (82852 82855 GM GME) driver on my laptop. |
|
|
Database statistics
Top process list
