By AnchorFree Inc (Signed)

Remove HssSrv.exe
Warning 9 antivirus scanners has detected malware in various versions of HssSrv.exe.


There are 20 versions of hsssrv.exe in the wild, the latest version being 2, 91, 0, 0. It is started as a Windows Service called 'ExpatSrv' with the name 'ExpatSrv'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 420.69 KB. The file is a digitally signed and issued to AnchorFree Inc by VeriSign. The programs Hotspot Shield 2.67, Expat Shield 2.24 and Hotspot Shield 3.09 have been observed as installing specific variations of hsssrv.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0073% including both foreground and background operations, the average private memory consumption is about 2.71 MB with the maximum memory reaching around 6.64 MB. Addionally, typically read and write I/O disk operations is about 13.35 KB per minute for reads and 8.62 KB per minute for writes.

What is hsssrv.exe?

Hotspot Shield allows you to create a VPN, or virtual private network, so you can transfer your data securely. When you access the Internet through such connections, you risk having your computer or mobile infected by a virus or even an intruder to enter your system. Moreover, the dangers exist that a malicious person can intercept your information and use it for unfriendly reasons.

About hsssrv.exe (from AnchorFree Inc)

Hotspot Shield creates a virtual private network (VPN) between your laptop or iPhone and our Internet gateway. This impenetrable tunnel prevents snoopers, hackers, ISP‘s, from viewing your web browsin


File name:hsssrv.exe
Publisher:AnchorFree Inc.
Typical file path:C:\Program Files\hotspot shield\hsswpr\hsssrv.exe
Issued to:AnchorFree Inc
Authority (CA):VeriSign
Effective date:Sunday, March 27, 2011
Expiration date:Sunday, April 13, 2014
Windows Service
Service name:ExpatSrv
Display name:ExpatSrv

ResourcesPrograms installed in

(Note, the programs listed below are for all versions of hsssrv.exe.)
AnchorFree Inc
  64% remove
If you are using the free Service, AnchorFree may deliver third-party Advertisements within the content of any web page accessed. Advertisements may be injected into the top of the page, inserted dire...
AnchorFree Inc
  61% remove
Expat Shield is a VPN program that allows users to access UK TV websites such as BBC iPlayer and ITV when outside of the UK. Expat Shield routes your IP address via a UK IP address as if you were stil...


(Note, the behaviors below are for all versions of hsssrv.exe, select a unique version for details.)
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • ExpatSrv
  • 'ExpatSrv' (Expat Shield Routing Service)
  • 'HssSrv' (Hotspot Shield Routing Service)

MalwareMalware detections

Based on 40+ industry antivirus scanners, 9 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
Emsisoft Anti-Malware Gen:Variant.Graftor.48415 (B) 2, 72, 0, 0
Emsisoft Anti-Malware Gen:Variant.Graftor.48415 (B) 2, 74, 0, 0
NANO AntiVirus Trojan.Win32.Siggen.bbwhyo 2, 74, 0, 0
nProtect 2013-03-11.01 Trojan/W32.Agent.413040.B 2, 74, 0, 0
The Hacker None Trojan/Agent.btae 2, 74, 0, 0
Trend Micro 9.740.0.1012 HT_AGENT_BK084128.TOMC 2, 74, 0, 0
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V1029 2, 72, 0, 0
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V1018 2, 74, 0, 0
VIPRE Antivirus 14200 Trojan.Win32.Generic!BT 2, 72, 0, 0

VersionsAll file variations of hsssrv.exe

MD5SHA-1File size
34d5adab9ff9059ad2387e343f4e78ae 9ff5d804945df6315986043dfad065d5e807700d 443.29 KB
66a6bdc86d7e3cb71cdf2af14bf3f871 3ed4e937389589603c2c93fb235447f984b50c18 444.79 KB
7321bca90dd53cc46efdf1d4d44964e1 39d7770b98f3f239506bde2ae5f624e8e3095b82 443.29 KB
adb256be4933817eae669e4cc7db69a5 f100d1cb1f090c07e0c1ac422be4fddfc94d1f26 434.29 KB
5732b012627c191a7e790a21ed83f4e4 f54627da5b0b41d357515d92caff062196b8cb0f 434.29 KB
80d9d2cb3a13334015636744f52429b2 579d688c74bc710230eb16533d5864187c39ce35 434.29 KB
509b8010ae0464fb2f69cadfbb26e8da afd938384eb4913d3953f095203ad23bf1202b50 434.29 KB
10c925d781fdb4b8343d0e678ff5c557 8ff21a7e091c52a0508fb5990ad779148b6e440b 434.44 KB
65bf8ff88e8d36c8a0296c8c7ccc3e55 88dd4905ac43534ab33af27145633d54fc9d0722 434.44 KB
3ec456e454e7cf930b6b2ff3d1a9ed2f 5a3f0fb205758d9f3f7e60102f3338b715ee6bf9 433.36 KB
f01ed33cd4242edc81e5de532571f47f 35bac14d92ad3ef52acd0c893e617c9f4c5fca1e 433.36 KB
00b4c32faf9d441761f6addba9aab4bd 6831c945f6bd97cc55f43feeb2e3c1b20c33f69a 433.36 KB
16c460dffc3f246685d8d9924bf6a8b5 80b098c887fb99d119e5ec363296ba4ccf97ee85 408.86 KB
d23e6567192c13b360a84741a0a377ab 72f4070825b6ce5535c05619f6a1497a576cc53f 408.86 KB
e521d91d1a3ddeb2867aa091a8a9d156 871e6804b43f703246736bb93038a666c87763bc 403.36 KB
c7b4e25747a5bd715026b9d769f51c5e e88aaf431c0fefb2eb0520a4c0298cd9bdd41af0 403.36 KB
e489256ceb48f882809b98769a0bac25 476a2205c5ead3f8142d6abeb83eaa34bdf06e21 402.36 KB
2cfea9c337b699aca38487e8a7438f35 5c68eded7f6d487a809e3e81619b2998d03408fe 354.82 KB
01947d3cbafcfef066e1eb45dadc182d 8b4ea39bad6eed512b4a98f6beebaa186205c36d 399.36 KB
4e59e65a27ebf0a5250bd608c03811dc bfca09dba10ee9b4ce7a251b6afd22293ffea465 395.36 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 33.33%
Windows 7 Home Premium 23.48%
Microsoft Windows XP 17.42%
Windows 7 Professional 6.82%
Windows Vista Home Premium 5.30%
Windows 8 Pro 4.55%
Windows 8 Enterprise 3.03%
Windows 8 2.27%
Windows 7 Ultimate N 2.27%
Windows XP Professional 0.76%
Windows 7 Home Basic 0.76%

Distribution by countryDistribution by country

United States installs about 22.76% of hsssrv.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 31.46%
Dell 13.48%
Hewlett-Packard 12.36%
ASUS 11.24%
Sony 8.99%
Acer 6.74%
MSI 4.49%
Lenovo 4.49%
Gateway 2.25%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE