Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

1.0.3203 18.52%
1.0.3203 66.67%
1.0.3203 3.70%
1.0.3203 3.70%
1.0.3203 3.70%
1.0.3203 3.70%
(Note, CyberLink publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
GetTokenInformation, OpenThreadToken, OpenProcessToken, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, GetLengthSid, CopySid, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegEnumValueW, RegQueryInfoKeyW, RegEnumKeyExW, RegCreateKeyExW, RegDeleteKeyW, RegOpenKeyExW, StartServiceCtrlDispatcherW, ControlService, DeleteService, CreateServiceW, RegDeleteValueW, RegSetValueExW, RegCloseKey, RegQueryValueExW, SetServiceStatus, RegisterServiceCtrlHandlerW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, OpenSCManagerW, OpenServiceW, CloseServiceHandle
iphlpapi.dll
SetIpTTL
kernel32.dll
OutputDebugStringW, GetCPInfo, SetStdHandle, EnterCriticalSection, LeaveCriticalSection, GetCurrentThread, GetCurrentProcess, CloseHandle, lstrcatW, lstrcpyW, LoadLibraryW, GetProcAddress, lstrcpynW, LoadLibraryExW, GetLastError, FindResourceW, LoadResource, SizeofResource, lstrlenA, MultiByteToWideChar, FreeLibrary, GetModuleHandleW, GetShortPathNameW, InterlockedIncrement, DeleteCriticalSection, InitializeCriticalSection, GetModuleFileNameW, lstrlenW, GetCommandLineW, lstrcmpiW, GetCurrentThreadId, InterlockedDecrement, GetOEMCP, GetACP, GetStringTypeW, GetStringTypeA, LCMapStringW, FlushFileBuffers, LoadLibraryA, IsBadCodePtr, IsBadReadPtr, SetUnhandledExceptionFilter, SetFilePointer, WideCharToMultiByte, WriteFile, RtlUnwind, HeapFree, HeapAlloc, HeapReAlloc, GetModuleHandleA, GetStartupInfoW, GetVersion, ExitProcess, TlsSetValue, TlsAlloc, SetLastError, TlsGetValue, GetModuleFileNameA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, TerminateProcess, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetEnvironmentStrings, GetCommandLineA, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, LCMapStringA
ole32.dll
CoCreateInstance, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemRealloc, CoTaskMemAlloc, CoInitialize, CoInitializeSecurity, CoUninitialize, CoTaskMemFree
user32.dll
DispatchMessageW, MessageBoxW, LoadStringW, GetMessageW, PostThreadMessageW, CharNextW

CLHNServiceForPowerDVD.exe

CLHNServiceForPowerDVD Module by CyberLink (Signed)

Remove CLHNServiceForPowerDVD.exe
Version:   1.0.3203
MD5:   43f2e10c73f8b9119ad396830a264fd3
SHA1:   a04fd89d1fd6d1935d3642e1dffc6bcc1b106927
SHA256:   327f08b6406adaa1788a93ed7ce18bf7f2afe8d189ff65a175d55cdca0900f60

Overview

clhnserviceforpowerdvd.exe runs as a service under the name CLHNServiceForPowerDVD with extensive SYSTEM privileges (full administrator access). The file is digitally signed by CyberLink which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:clhnserviceforpowerdvd.exe
Product name:CLHNServiceForPowerDVD Module
Typical file path:C:\Program Files\cyberlink\powerdvd11\kernel\dmp\clhnserviceforpowerdvd.exe
File version:1.0.3203
Size:81.29 KB (83,240 bytes)
Certificate
Issued to:CyberLink
Authority (CA):VeriSign
Effective date:Monday, February 16, 2009
Expiration date:Thursday, April 12, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'CLHNServiceForPowerDVD'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00185746%
0.028634%
Kernel CPU:0.00148966%
0.013761%
User CPU:0.00036779%
0.014873%
Kernel CPU time:140 ms/min
100,923,805ms/min
CPU cycles:1,818,377/sec
17,470,203/sec
Memory
Private memory:1.38 MB
21.59 MB
Private (maximum):2.83 MB
Private (minimum):1.11 MB
Non-paged memory:1.38 MB
21.59 MB
Virtual memory:36.26 MB
140.96 MB
Virtual memory (peak):39.51 MB
169.69 MB
Working set:1.79 MB
18.61 MB
Working set (peak):4.52 MB
37.95 MB
Page faults:4,557/min
2,039/min
I/O
I/O read transfer:8.18 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:388 Bytes/sec
448.09 KB/min
I/O other operations:65/sec
1,671/min
Resource allocations
Threads:4
12
Handles:99
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\cyberlink\powerdvd11\kernel\dmp\clhnserviceforpowerdvd.exe"
Owner:SYSTEM
Windows Service
Service name:CLHNServiceForPowerDVD
Description:“CLHNServiceForPowerDVD”
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
CLHNServiceForPowerDVD.exe (main module)
Total CPU:0.00547452%
0.272967%
Kernel CPU:0.00448138%
0.107585%
User CPU:0.00099314%
0.165382%
CPU cycles:81,804/sec
5,741,424/sec
Memory:80 KB
1.16 MB
sechost.dll
Total CPU:0.00236942%
Kernel CPU:0.00167887%
User CPU:0.00069055%
CPU cycles:47,648/sec
Memory:100 KB
wow64.dll
Total CPU:0.00005507%
Kernel CPU:0.00002754%
User CPU:0.00002754%
CPU cycles:1,281/sec
Memory:252 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 40.74%
Windows 7 Ultimate 33.33%
Windows 7 Professional 14.81%
Microsoft Windows XP 11.11%

Distribution by countryDistribution by country

Ireland installs about 18.52% of CLHNServiceForPowerDVD Module.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 25.00%
Dell 25.00%
Toshiba 16.67%
Lenovo 16.67%
Hewlett-Packard 16.67%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE