Some users have raised concerns about the hkcmd.exe procedure.. Most users express concern after noticing that the hkcmd.exe procedure is a constant presence in Task Manages and seems to start on every startup.. Most of the time, hkcmd.exe is a genuine procedure signed by Intel, commonly known as the graphics hotkey interceptor.
Even though the legitimate procedure is absolutely safe, we suggest investigating the executable, since there is a large amount of malware that specifically targets files located within the System32 folder to avoid security analysis.
What is hkcmd.exe?
Hkcmd.exe is Intel's hotkey interpreter. HKCMD stands for »Hotkey Command«. This hotkey module generally installs with Intel graphics controller chips 810 Y 815. The executable is not a Windows system file and is scheduled to run at Windows startup without a visible window.
In Windows 7 and earlier versions, hkcmd.exe controls hotkeys associated with video as part of the Intel Common User Interface. Please note that this procedure should be longer on Windows 8 and later versions, since it was replaced by Igfxhk.exe.
The sole purpose of this procedure is to provide quick access to Intel's custom graphics properties.. As an example, pressing Ctrl + Alt + F12 accesses the Intel Graphics and Media Control Panel. If the hkcmd.exe shortcut is disabled, this shortcut (and any other Intel shortcuts) it won't work anymore.
Potential security threat?
As it was mentioned already, there are some malicious programs that can disguise themselves as the hkcmd.exe executable. Even though there could be more, we have managed to identify three occurrences that are commonly reported by infected users: Virus: Win32 / Sality.AT, W32.Sality. AE Y TrojanDownloader: Win32 / Unruy.C.
If you suspect a virus infection, start by finding out if you really have an Intel component that installs the hotkey module. And note that if you are on Windows 8 the superior, you should not be able to find hkcmd.exe in your Task Manager; the module has been replaced by Igfxhk.exe in the latest versions of Windows.
If the facts point to a virus infection, you need to do a full scan of your system with a powerful malware remover like Malwarebytes. if you have difficulty using it, follow our detailed post (here) on installing and using Malwarebytes to get rid of a virus infection.
Should I delete hkcmd.exe?
If you have determined that the hkcmd.exe procedure is legitimate, you have some alternatives to proceed if you want to remove it from your Task Manager.
Note: Deleting the executable manually is not an acceptable solution, since it could end up breaking your common Intel UI.
If you want to prevent the hkcmd.exe procedure from being called throughout startup, you can disable it from the Intel Extreme Graphics interface. To do this, open Control Panel, go to Intel Extreme Graphics and uncheck the checkbox next to hotkeys.
If you have the latest Intel software, you can press Ctrl + Alt + F12 to open the Intel Graphics and Media Control Panel. Then, enter basic mode, select the Options & Support tab and uncheck the box next to the hotkeys feature.
If you want to uninstall or reinstall the hkcmd.exe module along with its main application, must remove Intel Graphics Media Accelerator (R). To do this, open a Run command (tecla de Windows + R), scribe “appwiz.cpl” and press Enter to open Programs and Features.
In Programs and Features, find and uninstall Intel Accelerator (R) for graphic media by right clicking and choosing Uninstall. With the main program removed, hkcmd.exe should no longer be visible in Task Manager (unless it's malicious).
