We received the file HCSVC.EXE and detected that HCSVC.EXE is not good.
HCSVC.EXE is Adware. You should remove the file HCSVC.EXE.
Kill the process HCSVC.EXE and remove HCSVC.EXE from Windows.
Malware Analysis of HCSVC.EXE
Full path on a computer: %Program Files%\hcpop\hcsvc.exe
Detected by UnHackMe:
Item Name: hcpop update
Author:
Related File: %Program Files%\hcpop\hcsvc.exe
Type: Auto Services
Item Name: HCSVC.EXE
Author: Unknown
Related File: %PROGRAM FILES%\HCPOP\HCSVC.EXE
Type: Multi AV Detected Files
Removal Results: Success
Number of reboot: 1
HCSVC.EXE is known as:
Adware.Kraddare.HB
HCSVC.EXE hash:
- MD5: 896f30908ce09190d8ad9bedec4a0535
The file is used for downloading and installing other malware, Trojans, viruses by the commands received from the Command Center.
How to quickly detect HCSVC.EXE presence?
![]( "Registry")
Registry:
![]( "Folders")
Folders:
![]( "Files")
Files:
Registry:- HKLM\System\CurrentControlSet\Services\hcpop update\ImagePath: “%Program Files%\hcpop\hcsvc.exe”
- HKLM\System\CurrentControlSet\Services\hcpop update\DisplayName: “hcpop update svc”
- HKLM\System\CurrentControlSet\Services\hcpop update\Description: “hcpop update”
Folders:- %Program Files%\hcpop
Files:- %Program Files%\hcpop\hcpop.exe
- %Program Files%\hcpop\hcsvc.exe
- %Program Files%\hcpop\uninst.exe
- %WinDir%\rnsa.ini