By AnchorFree Inc (Signed)

Remove hsswd.exe
Warning 12 antivirus scanners has detected malware in various versions of hsswd.exe.


hsswd.exe has 27 known versions, the most recent one is . It is started as a Windows Service called 'ExpatWd' with the name 'ExpatWd'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 425.95 KB. It is an authenticode code-signed executable issued to AnchorFree Inc by the certification authority VeriSign. The programs Hotspot Shield 2.88, Hotspot Shield 2.61 and Hotspot Shield 2.84 have been observed as installing specific variations of hsswd.exe. During the process's lifecycle, the typical CPU resource utilization is about 0.0048% including both foreground and background operations, the average private memory consumption is about 2.84 MB with the maximum memory reaching around 4.97 MB. Addionally, typically read and write I/O disk operations is about 5.67 KB per minute for reads and 23 Bytes per minute for writes.

About hsswd.exe (from AnchorFree Inc)

Hotspot Shield creates a virtual private network (VPN) between your laptop or iPhone and our Internet gateway. This impenetrable tunnel prevents snoopers, hackers, ISP‘s, from viewing your web browsin


File name:hsswd.exe
Typical file path:C:\Program Files\hotspot shield\bin\hsswd.exe
Issued to:AnchorFree Inc
Authority (CA):VeriSign
Effective date:Sunday, March 27, 2011
Expiration date:Sunday, April 13, 2014
Windows Service
Service name:ExpatWd
Display name:ExpatWd

ResourcesPrograms installed in

(Note, the programs listed below are for all versions of hsswd.exe.)
AnchorFree Inc
  60% remove
Hotspot Shield bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install...
AnchorFree Inc
  61% remove
Expat Shield is a VPN program that allows users to access UK TV websites such as BBC iPlayer and ITV when outside of the UK. Expat Shield routes your IP address via a UK IP address as if you were stil...


(Note, the behaviors below are for all versions of hsswd.exe, select a unique version for details.)
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • ExpatWd
  • 'ExpatWd' (Expat Shield Monitoring Service)
  • 'HssWd' (Hotspot Shield Monitoring Service)

MalwareMalware detections

Based on 40+ industry antivirus scanners, 12 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
Emsisoft Anti-Malware Gen:Variant.Graftor.48415 (B) 76b79a1afdd992812c21c0c015744d15
Emsisoft Anti-Malware Gen:Variant.Graftor.48415 (B) bb4b1326f64c3e1c1102258dc453851e
Jiangmin 13.0.900 Trojan/Agent.iewo 76b79a1afdd992812c21c0c015744d15
NANO AntiVirus Trojan.Win32.Agent2.bbullt bb4b1326f64c3e1c1102258dc453851e
nProtect 2013-03-11.01 Trojan/W32.Agent.389488 bb4b1326f64c3e1c1102258dc453851e
The Hacker None Trojan/Agent2.cspl bb4b1326f64c3e1c1102258dc453851e
Trend Micro 9.740.0.1012 HT_AGENT_BK08412A.TOMC bb4b1326f64c3e1c1102258dc453851e
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V1103 76b79a1afdd992812c21c0c015744d15
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V1018 bb4b1326f64c3e1c1102258dc453851e
Vba32 AntiVirus Trojan.Agent.abak 76b79a1afdd992812c21c0c015744d15
Vba32 AntiVirus Trojan.Agent.abin 18ee60a306c973e5a94bb27ef40df55f
VIPRE Antivirus 14330 Trojan.Win32.Generic!BT 76b79a1afdd992812c21c0c015744d15

VersionsAll file variations of hsswd.exe

MD5SHA-1File size
564bab77cd96ce0e3fd5bbcdded142df c8e993c3130261d8cbe19ad59311218a3c3250e1 321.82 KB
f4c1b3c4847bba031acfdce5a3f0cfcb 285a09a857160d1a6fbf93369e0cdb244b5f676a 378.36 KB
76b79a1afdd992812c21c0c015744d15 28b2a0b5c5d5a5f99b158dedc9cb569443d40bee 379.36 KB
bb4b1326f64c3e1c1102258dc453851e dd976effbb31daf05311f81c88eb886b99a129a4 380.36 KB
e39c35d884f8175b8786f34eafca9fde 1960c836b283fa61dc502fd57f64cadcb5aee456 380.36 KB
d175cfbc4b0a5b3e5f4a689b0c4ed04e 73dda1baee91bbaf7d611b93c16221c5ec1ba9f6 379.86 KB
35e91df99b8ceaa477e0ab86052475d6 487f6293282e39ec8b1ddee540b4cec733966612 380.36 KB
a4ca49640f2913b06fc1f0471bb7ef04 382296687f1ab040afc47f7fc7ddb4704455d545 380.94 KB
f91bb6ab0840201811d63b1ccfc9a4e3 ffe61a69b93390a6585e8b07a975b59e7b527ca6 380.79 KB
65603557909d7e9ac21153455a2ba92a 038a34e487b3000ec067a3e02222d5bc6d29be11 380.79 KB
4cc98aab06c42d0ec741b511441b3ca3 0c2dd254ba00a21d73750a7293d1979cbffbdb08 380.79 KB
881dbc18733027eff95aabd09f8b57af bc47fe9fadbe236b5ef9753f8c7a68546b852c7b 380.79 KB
bad7b9dc6eddfbca681873c1507f110d b3e05b8001393861a9a7c689749ea32e411f0ece 380.94 KB
2e1df960a48bde321881823abbb2e1c7 1da69bacaffe0112840212717e18bc08f5d37427 380.79 KB
ec0c133e1278e28bfc6f8f75be18a772 4fd84a59f4fbd00af5aa30db8a4e50e87de0600f 381.29 KB
edfe7b17b537397df184e8d7ad55378b 28be2e1909a04e0f9d0590565acc1bfaa86e1c1a 381.29 KB
91939d75ef2e69406a39c0f171feb0f2 f0627b72d209279bc9fca333ec3761ac575cd74e 381.79 KB
18ee60a306c973e5a94bb27ef40df55f 6ad8e51dcccf62883bb57e141a73da57f3eed71b 380.79 KB
fa2a2a7e868ebfa0f0997f76cef7b9b0 b060de925992f93886f3a704986bf71c33be4210 535.29 KB
3bba92e00ba44bb0abb8b5b3bda6c5b8 0c394f18db9f1cea689155ec803eaac343b6ec09 376.36 KB
51cb81fa5a1be7d1b860cf64e05ff990 f45dcce528f77649b3eb8dd3188b8d1c9184f79b 542.29 KB
67a2b219d8d91c1bc66a6a5ef507ce6c ee368e9bf274b843384cce7a6bc0e53121ce3602 543.79 KB
a44934540360e3f25ce3da716e271851 459f28b8db7517d46a877f7dcefb25163b15ffec 542.29 KB
01f174df0f102955ad6a875e36c2939c a4a4e1056eaa484ce5d846949b4b50be3b751c37 542.29 KB
704ee8ea4a9993e3fd57ec20268cf537 08c921d8f5fc8d5574296f51e2fda1270a3ebb38 542.29 KB
e767250c661cce0305761d8ae7d30cc1 40cc5044c4c349cd6b52d60f16eb031625305afd 542.29 KB
59e36aaf23355b9d3852fb39cfd928d4 87248ba50c4648058a6506736eb5e95ba5c67e03 542.29 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 38.31%
Windows 7 Home Premium 21.43%
Microsoft Windows XP 14.29%
Windows 8 Pro 6.49%
Windows Vista Home Premium 4.55%
Windows 7 Professional 3.90%
Windows 7 Home Basic 2.60%
Windows 8 Enterprise 2.60%
Windows 7 Ultimate N 1.95%
Windows 8 Pro with Media Center 1.30%
Windows 8 Single Language 0.65%
Windows 8 Enterprise N 0.65%
Windows XP Professional 0.65%
Windows 8 0.65%

Distribution by countryDistribution by country

United States installs about 20.69% of hsswd.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 24.19%
Dell 19.35%
ASUS 12.90%
Hewlett-Packard 10.48%
Lenovo 9.68%
Acer 7.26%
Intel 3.23%
Sony 3.23%
MSI 3.23%
American Megatrends 1.61%
Gateway 1.61%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE