HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE is Tools Hotspot Shield

The file HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE is not a virus.
The program HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE is a system security tool.
But the HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE tool may be used to compromise computer security by the hacker.
Use the HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE file at your own risk!
You can delete the HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE program from your computer with problems.

Malware Analysis of HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE
Full path on a computer: %Temp%\HSS-1.58-install-anchorfree-76-conduit.exe

Detected by UnHackMe:

HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE
Default location: %Temp%\HSS-1.58-install-anchorfree-76-conduit.exe

HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE is known as:

Tools.Hotspot Shield

HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE hash:

  • MD5: 5a5a5b385ffeaa5381c5c8e60288955b
The file tries to download information from some web sites.
How to quickly detect HSS-1.58-INSTALL-ANCHORFREE-76-CONDUIT.EXE presence?

Registry:
  • HKLM\Software\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}\InprocServer32\: “%Program Files%\Hotspot Shield\HssIE\HssIE.dll”
  • HKLM\System\CurrentControlSet\Services\Eventlog\Application\HssSrv\EventMessageFile: “%Program Files%\Hotspot Shield\HssWPR\hsssrv.exe”
  • HKLM\System\CurrentControlSet\Services\Eventlog\Application\HssWd\EventMessageFile: “%Program Files%\Hotspot Shield\bin\hsswd.exe”
  • HKLM\System\CurrentControlSet\Services\hshld\ImagePath: “%Program Files%\Hotspot Shield\bin\openvpnas.exe”
  • HKLM\System\CurrentControlSet\Services\HssDrv\ImagePath: “system32\DRIVERS\HssDrv.sys”
  • HKLM\System\CurrentControlSet\Services\HssSrv\ImagePath: “%Program Files%\Hotspot Shield\HssWPR\hsssrv.exe”
  • HKLM\System\CurrentControlSet\Services\HssTrayService\ImagePath: “%Program Files%\Hotspot Shield\bin\HssTrayService.EXE”
  • HKLM\System\CurrentControlSet\Services\HssWd\ImagePath: “%Program Files%\Hotspot Shield\bin\hsswd.exe -product HSS”
  • HKLM\System\CurrentControlSet\Services\taphss\ImagePath: “system32\DRIVERS\taphss.sys”
Folders:
  • %Local Appdata%\Conduit
  • %Temp%\HssInstaller
  • %Common Startmenu%\Programs\Hotspot Shield
  • %Program Files%\Conduit
  • %Program Files%\Hotspot Shield
  • %Program Files%\Hotspot_Shield
  • C:\Hotspot Shield
Files:
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\engine@conduit.com\components\ConduitToolbar.xpt
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\engine@conduit.com\components\RadioWMPCore.dll
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\engine@conduit.com\components\RadioWMPCore.xpt
  • %Appdata%\Mozilla\Firefox\Profiles\gi17c3pt.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll
  • %Common Desktopdirectory%\Hotspot Shield Launch.lnk
  • %Common Startmenu%\Programs\Hotspot Shield\Hotspot Shield Control Panel.url
  • %Common Startmenu%\Programs\Hotspot Shield\Hotspot Shield Launch.lnk
  • %Common Startmenu%\Programs\Hotspot Shield\Uninstall Hotspot Shield.lnk
  • %Program Files%\Conduit\Community Alerts\Alert.dll
  • %Program Files%\Hotspot Shield\bin\FBW.exe
  • %Program Files%\Hotspot Shield\bin\hssinst.dll
  • %Program Files%\Hotspot Shield\bin\HssInstaller.exe
  • %Program Files%\Hotspot Shield\bin\HssTrayService.exe
  • %Program Files%\Hotspot Shield\bin\hsswd.exe
  • %Program Files%\Hotspot Shield\bin\libcurl.dll
  • %Program Files%\Hotspot Shield\bin\libeay32.dll
  • %Program Files%\Hotspot Shield\bin\libidn-11.dll
  • %Program Files%\Hotspot Shield\bin\libpkcs11-helper-1.dll
  • %Program Files%\Hotspot Shield\bin\libssl32.dll
  • %Program Files%\Hotspot Shield\bin\openvpn.exe
  • %Program Files%\Hotspot Shield\bin\openvpnas.exe
  • %Program Files%\Hotspot Shield\bin\openvpntray.exe
  • %Program Files%\Hotspot Shield\bin\tapinstall.exe
  • %Program Files%\Hotspot Shield\bin\vistahlp.dll
  • %Program Files%\Hotspot Shield\driver\taphss.sys
  • %Program Files%\Hotspot Shield\HssIE\HssIE.dll
  • %Program Files%\Hotspot Shield\HssWPR\hssdrv.sys
  • %Program Files%\Hotspot Shield\HssWPR\hssinst.dll
  • %Program Files%\Hotspot Shield\HssWPR\HssInstaller.exe
  • %Program Files%\Hotspot Shield\HssWPR\hsssrv.exe
  • %Program Files%\Hotspot_Shield\Hotspot_ShieldToolbarHelper.exe
  • %SysDir%\drivers\HssDrv.sys
  • %SysDir%\drivers\taphss.sys

Fix it immediately!

Free Download

UnHackMe removes malware invisible for your antivirus!

Leave a Reply