Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

7.0.0.4124	1.10%
7.0.0.4124	2.20%
4.3.3318	4.40%
4.3.3318	21.98%
4.3.3318	6.59%
4.3.3220	5.49%
4.3.3109	8.79%
4.3.3109	3.30%
2.1.3023.0	13.19%
2.1.1803.0	9.89%
2.1.1803.0	6.59%
2.1.1803.0	5.49%
2.1.1803.0	2.20%
2, 3, 2507, 0	1.10%
2, 3, 2203, 0	2.20%
2, 1, 2417, 0	1.10%
2, 1, 2229, 0	2.20%
2, 1, 2111, 0	1.10%
2, 1, 2111, 0	1.10%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegEnumKeyExW, RegDeleteKeyW, GetUserNameW, InitializeSecurityDescriptor, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, RegSetValueExW, SetSecurityDescriptorDacl, RegCreateKeyW

gdiplus.dll

GdipCloneImage, GdipDrawImageRectI, GdipGetImageGraphicsContext, GdipGetImageEncoders, GdipGetImageEncodersSize, GdipCreateBitmapFromScan0, GdipAlloc, GdipDeleteGraphics, GdipFree, GdipDisposeImage, GdipSaveImageToStream, GdipCreateBitmapFromFile, GdipGetImageHeight, GdipGetImageWidth

kernel32.dll

ExitProcess, GetStartupInfoW, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, GetModuleHandleA, GetVersionExA, GetVersionExW, InitializeCriticalSection, DeleteCriticalSection, Process32NextW, CloseHandle, Process32FirstW, CreateToolhelp32Snapshot, WaitForSingleObject, SetEvent, ResetEvent, GetFileAttributesW, GetModuleFileNameW, CreateMutexW, CreateEventW, InterlockedIncrement, InterlockedDecrement, Sleep, ReleaseMutex, DeleteFileW, GetSystemTime, WaitForMultipleObjects, ResumeThread, SetThreadPriority, CreateThread, GetLastError, GetPrivateProfileStringW, GetModuleHandleW, GetOverlappedResult, DisconnectNamedPipe, WaitNamedPipeW, CreateFileW, LeaveCriticalSection, EnterCriticalSection, ReadFile, WriteFile, ConnectNamedPipe, CreateNamedPipeW, OutputDebugStringW, GetPrivateProfileIntW, GetFileAttributesExW, DeviceIoControl, FindClose, FindFirstFileW, GetVolumeNameForVolumeMountPointW, GetDriveTypeW, GetLogicalDrives, GetTickCount, FreeLibrary, GetProcAddress, QueryDosDeviceW, LoadLibraryExW, FindNextFileW, GetLongPathNameW, CreateIoCompletionPort, ReadDirectoryChangesW, GetQueuedCompletionStatus, SetPriorityClass, GetCurrentProcess, GetDiskFreeSpaceExW, LoadLibraryW, CreateDirectoryW, RemoveDirectoryW, GlobalUnlock, GlobalLock

msvcp71.dll

DllMain

msvcr71.dll

DllMain

ole32.dll

GetHGlobalFromStream, CoCreateInstance, CoUninitialize, CreateStreamOnHGlobal, CoInitialize

rpcrt4.dll

UuidCreate, UuidToStringW, RpcStringFreeW

setupapi.dll

SetupDiGetDeviceInterfaceDetailW, SetupDiGetClassDevsW, SetupDiEnumDeviceInterfaces, SetupDiDestroyDeviceInfoList

shell32.dll

SHGetSpecialFolderPathW, SHGetFolderPathW

shlwapi.dll

PathAddBackslashW

user32.dll

UnregisterClassW, RegisterWindowMessageW, LoadCursorW, RegisterClassW, CreateWindowExW, GetWindowLongW, PostMessageW, UnregisterDeviceNotification, DefWindowProcW, SetTimer, IsWindow, SetWindowLongW, DestroyWindow, KillTimer, RegisterDeviceNotificationW, wsprintfW, GetMessageW, DispatchMessageW

CLMLSvc.exe

CyberLink MediaLibray Service by CyberLink (Signed)

Remove CLMLSvc.exe

Version:	4.3.3318
MD5:	66275e52615af9d2f18eb3442d00cfe3
SHA1:	7b1f772fc69d23d27e9cef9624b5597fad32bcad
SHA256:	b4d574d9bbebd7cf46a630488491cc2b0a93f8830f24584c4e0981fe2f0c235d

What is CLMLSvc.exe?

CyberLink MediaLibray Service for Cyberlink Media Library is a management utility designed to organize photos, videos and music files. Cyberlink Media Suite contains a library tagged with uploaded photos to Facebook, capture video clips from a larger video file and a number of other media-related features.

Overview

clmlsvc.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). This is typically installed with the program HP MediaSmart CinemaNow 2.0 published by Hewlett-Packard. The file is digitally signed by CyberLink which was issued by the VeriSign certificate authority (CA).

Details

File name:	clmlsvc.exe
Publisher:	CyberLink
Product name:	CyberLink MediaLibray Service
Typical file path:	C:\Program Files\hewlett-packard\touchsmart\media\kernel\clml\clmlsvc.exe
File version:	4.3.3318
Size:	205.29 KB (210,216 bytes)
Certificate
Issued to:	CyberLink
Authority (CA):	VeriSign
Effective date:	Monday, February 16, 2009
Expiration date:	Thursday, April 12, 2012
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 7.1
.NET CLR:	No

More details

Programs

The following program will install this file

HP MediaSmart CinemaNow

Hewlett-Packard

18% remove

“There's nothing more personal than how you live your life. That's why HP is creating a highly robust connected entertainment experience as we enable the “digital lifestyle” with HP MediaSmart Connect and CinemaNow. The CinemaNow library is packed with the largest selection of titles with more than 6,100 feature-length films, shorts, music concerts and television programs in standard and high definition from more than 250 licensors, incl...”

Behaviors

Scheduled tasks

The task 'CLMLSvc' runs on logon in the path '\CLMLSvc'
Entry path '\Cyberlink Trigger Task'
Entry path '\CLMLSvc'

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'CLMLServer for HP TouchSmart' → "C:\Program Files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
'CLMLServer' → "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"

Scheduled tasks startups

Set to load on user login (bypasses Windows UAC if enabled)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00029186%	0.028634%
Kernel CPU:	0.00009571%	0.013761%
User CPU:	0.00019615%	0.014873%
Kernel CPU time:	2,361,559 ms/min	100,923,805ms/min
CPU cycles:	19,594,698/sec	17,470,203/sec
Memory
Private memory:	58.6 MB	21.59 MB
Private (maximum):	19.59 MB
Private (minimum):	3.39 MB
Non-paged memory:	58.6 MB	21.59 MB
Virtual memory:	159.04 MB	140.96 MB
Virtual memory (peak):	166.07 MB	169.69 MB
Working set:	4.14 MB	18.61 MB
Working set (peak):	21.54 MB	37.95 MB
Page faults:	113,788,356/min	2,039/min
I/O
I/O read transfer:	5.94 KB/sec	1.02 MB/min
I/O read operations:	7/sec	343/min
I/O write transfer:	18.54 KB/sec	274.99 KB/min
I/O write operations:	37/sec	227/min
I/O other transfer:	33.16 KB/sec	448.09 KB/min
I/O other operations:	2,024/sec	1,671/min
Resource allocations
Threads:	8	12
Handles:	277	600
GUI GDI count:	14	103
GUI GDI peak:	16	142
GUI USER count:	13	49
GUI USER peak:	17	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command line:	"C:\Program Files\hewlett-packard\touchsmart\media\kernel\clml\clmlsvc.exe"
Owner:	User
Parent process:	taskeng.exe (Task Scheduler Engine by Microsoft)

Threads

Averages

CLMLSvc.exe (main module)
Total CPU:	0.23769018%	0.272967%
Kernel CPU:	0.22306783%	0.107585%
User CPU:	0.01462235%	0.165382%
CPU cycles:	3,849,930/sec	5,741,424/sec
Memory:	200 KB	1.16 MB
ntdll.dll
Total CPU:	0.00303522%
Kernel CPU:	0.00303522%
User CPU:	0.00000000%
CPU cycles:	1,964/sec
Memory:	1.66 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	59.09%
Windows 8 Pro	7.95%
Windows 8.1	6.82%
Windows 7 Ultimate	5.68%
Windows Vista Home Premium	5.68%
Windows 8	4.55%
Windows 8 Pro with Media Center	3.41%
Microsoft Windows XP	2.27%
Windows 8.1 Single Language	1.14%
Windows 8 Enterprise	1.14%
Windows 7 Professional	1.14%
Windows 7 Home Basic	1.14%

Distribution by country

United States installs about 71.59% of CyberLink MediaLibray Service.

Distribution by PC manufacturer

PC Manufacturer	distribution
Hewlett-Packard	45.57%
ASUS	22.78%
Lenovo	12.66%
Dell	5.06%
Samsung	3.80%
Acer	3.80%
Medion	2.53%
Toshiba	2.53%
GIGABYTE	1.27%

Remove Adware and Spyware Programs, FREE Download!