Many users of Hikvision PCPlayer, EZVIZ Studio, or other Hikvision surveillance software become concerned when Windows suddenly displays a User Account Control (UAC) popup requesting permission to run update_server.exe. Because the popup may display a Chinese company name and ask for administrator privileges, users often wonder whether it is a virus, malware, or a legitimate software update.

In most cases, this behavior is completely normal and is part of Hikvision's official software update mechanism.

This article explains what update_server.exe is, why it appears, whether it is safe, how to verify its authenticity, and how to resolve repeated UAC prompts.

The Scenario

A Windows computer displays the following UAC message:

Do you want to allow this app to make changes to your device?

Program:

update_server Setup

Verified Publisher:

HangZhou Hikvision Digital Technology Co., Ltd.

Program Location:

C:\Users\<Username>\shipin7_update_temp\update_server.exe

Additional observations:

• PCPlayer is installed
• update_server component is installed
• supportserver component is installed
• Digital Signature is valid
• Certificate issued by GlobalSign

What is update_server.exe?

update_server.exe is the official updater component installed with Hikvision PCPlayer.

Its primary functions include:

• Checking for software updates
• Downloading new program versions
• Installing security patches
• Updating camera compatibility
• Updating codecs
• Updating device communication libraries

It is similar to update utilities used by:

• Google Chrome
• Adobe Acrobat
• Microsoft Office
• Zoom
• TeamViewer

What is PCPlayer?

PCPlayer is Hikvision's desktop surveillance software used for:

• Live camera viewing
• DVR monitoring
• NVR monitoring
• Video playback
• Camera configuration
• Alarm monitoring
• Video recording management

The updater ensures the software remains compatible with the latest firmware and security improvements.

Understanding the Installed Components

Most Hikvision PCPlayer installations include three major components.

1. PCPlayer

Main surveillance application.

Responsible for:

• Viewing cameras
• Managing devices
• Playback
• Recording

2. update_server

Background update utility.

Responsible for:

• Update detection
• Downloading new versions
• Launching installers

3. supportserver

Background support service.

May provide:

• Device communication
• Internal services
• Remote support functions
• Local communication between modules

Why Does Windows Show a UAC Prompt?

Windows displays User Account Control whenever a program wants Administrator privileges.

Updating software generally requires permission to:

• Replace application files
• Install services
• Modify registry entries
• Update drivers
• Write to Program Files
• Configure Windows services

This is normal Windows security behavior.

Why Does the Publisher Name Appear in Chinese?

Many users assume this indicates malware.

It does not.

The certificate displays the company's registered legal name.

Example:

HangZhou Hikvision Digital Technology Co., Ltd.

Windows simply displays the official legal name stored in the digital certificate.

Is update_server.exe Safe?

If all of the following are true:

✔ Installed together with PCPlayer

✔ Digital Signature is valid

✔ Publisher is HangZhou Hikvision Digital Technology Co., Ltd.

✔ Certificate issued by GlobalSign

✔ Antivirus reports the file as clean

then the updater is generally considered legitimate.

How to Verify It Is Genuine

Check Digital Signature

Right-click

update_server.exe

Properties

Digital Signatures

Verify:

Publisher

Certificate

Timestamp

Status

Verify Certificate

The certificate should show information similar to:

Issued To

HangZhou Hikvision Digital Technology Co., Ltd.

Issued By

GlobalSign GCC R45 CodeSigning CA 2020

Status

This digital signature is OK.

Check File Location

Typical update folder:

C:\Users\<User>\shipin7_update_temp\

or

Program Files

Unexpected folders deserve further investigation.

Scan with Antivirus

Always scan the executable.

A second opinion from VirusTotal can also be useful.

Why Does It Keep Appearing?

Common causes include:

Automatic Update

The software checks for new versions.

Failed Previous Update

The update could not complete.

The updater retries later.

Administrator Permission Required

The updater cannot continue without elevation.

Corrupted Update Package

Downloaded update files became corrupted.

Scheduled Update Task

Windows Task Scheduler launches the updater during startup.

How to Stop the Popup

Solution 1

Update PCPlayer manually.

After updating successfully, the popup usually disappears.

Solution 2

Disable automatic updates (if supported by your version).

Solution 3

Delete temporary update cache

After closing PCPlayer:

C:\Users\<User>\shipin7_update_temp\

The folder may be recreated automatically during the next update.

Solution 4

Reinstall the latest PCPlayer version.

Solution 5

Remove PCPlayer if no longer required.

This also removes:

• update_server
• supportserver

Advanced Troubleshooting

Check Startup Programs

Open Task Manager

Startup Apps

Look for:

• PCPlayer
• Update Server
• Hikvision

Check Services

Run:

services.msc

Look for Hikvision-related services.

Check Scheduled Tasks

Run:

taskschd.msc

Look for:

• Update Server
• Hikvision Update
• PCPlayer Update

Monitor the Process

Microsoft Process Explorer can show:

• Parent process
• Child process
• Loaded DLLs
• Digital signature
• Command line

Security Best Practices

• Install Hikvision software only from official sources.
• Keep Windows updated.
• Keep your antivirus enabled.
• Verify digital signatures before approving unknown installers.
• Do not disable UAC permanently.
• Remove unused surveillance software.

When Should You Click "Yes"?

You can generally allow the update if:

• You installed PCPlayer yourself.
• You actively use Hikvision or EZVIZ devices.
• The publisher is correctly verified.
• The certificate is valid.
• The update is expected.

When Should You Click "No"?

Choose No if:

• You never installed Hikvision software.
• The publisher is unknown.
• The digital signature is invalid.
• Antivirus detects the file.
• The file appears in an unusual location.

Conclusion

The update_server.exe UAC prompt is usually a legitimate part of the Hikvision PCPlayer update process. The presence of a valid GlobalSign code-signing certificate and a verified publisher strongly indicates that the software is authentic. Administrator permission is requested because updating installed applications requires elevated privileges.

If you use Hikvision surveillance products, allowing the update is generally safe after confirming the publisher and digital signature. However, if you do not recognize the software or the file fails security checks, investigate further before approving the request.

Frequently Asked Questions (FAQ)

Q1. Is update_server.exe a virus?

Usually no. It is the official updater for Hikvision PCPlayer when obtained from a legitimate installation.

Q2. Why is the publisher displayed in Chinese?

Windows shows the software publisher's registered legal name from the digital certificate.

Q3. What is supportserver?

It is a background component used by Hikvision software for internal services and communication.

Q4. Why does Windows ask for administrator permission?

Software updates often need to modify protected files, services, or registry settings, which require elevated privileges.

Q5. Can I disable update_server?

You may be able to disable automatic updates, but doing so could leave the application without security fixes or compatibility updates.

Q6. Is it safe to delete the shipin7_update_temp folder?

It is generally safe to remove temporary update files after ensuring no update is in progress. The folder may be recreated automatically during future updates.

Q7. How do I verify the updater is genuine?

Check the digital signature, verify the publisher, confirm the certificate is valid, and scan the file with your antivirus.

Q8. What if the UAC prompt appears every startup?

The previous update may have failed, automatic updates may be enabled, or a scheduled task is repeatedly launching the updater. Updating or reinstalling PCPlayer usually resolves the issue.

Q9. Should I uninstall PCPlayer if I no longer use it?

Yes. Removing unused software also removes its updater and background services, reducing unnecessary startup tasks.

Q10. Does a valid digital signature guarantee a file is completely safe?

A valid signature confirms the publisher and that the file has not been altered after signing, but it is still good practice to verify the source and perform antivirus scans.

#PCPlayer #Hikvision #EZVIZ #Windows #Windows11 #Windows10 #UAC #UserAccountControl #SoftwareUpdate #UpdateServer #SupportServer #DigitalSignature #GlobalSign #CodeSigning #CyberSecurity #WindowsSecurity #ITSupport #TechSupport #Troubleshooting #WindowsTips #WindowsGuide #CCTV #DVR #NVR #IPCamera #Surveillance #ApplicationSecurity #EndpointSecurity #ComputerSecurity #Malware #VirusProtection #Antivirus #TaskScheduler #ProcessExplorer #PowerShell #WindowsAdmin #SoftwareMaintenance #SoftwareInstallation #SecuritySoftware #DigitalCertificate #TechBlog #KnowledgeBase #ITEngineer #SystemAdministrator #DesktopSupport #ComputerRepair #WindowsHelp #SystemMaintenance #BisonInfosolutions #TechArticle