Versions

2.10.31.0	2.90%
2.9.8.2	1.45%
2.8.11.9	2.90%
2.7.23.2	1.45%
2.7.14.4	2.90%
1.7.0.72	2.90%
1.5.0.71	24.64%
1.4.3.7	2.90%
1.4.2.2	1.45%
1.4.1.12	20.29%
1.4.0.65	17.39%
1.3.0.184	1.45%
1.2.5.2	4.35%
1.2.3.6	11.59%
1.2.2.4	1.45%

Warning 30 antivirus scanners has detected malware in various versions of cltmngsvc.exe.

cltmngsvc.exe has 15 known versions, the most recent one is 2.10.31.0. It is started as a Windows Service called 'Search Protect by Conduit Service' with the name 'CltMngSvc' and described as “This service loads the Search Protector, which maintains your selected Search settings, and enables auto-updates.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 710.58 KB. It is an authenticode code-signed executable issued to Conduit Ltd. by the certification authority VeriSign. Numerous variations of cltmngsvc.exe have been installed with both Search Protect by conduit and Search Protect. During the process's lifecycle, the typical CPU resource utilization is about 0.0020% including both foreground and background operations, the average private memory consumption is about 4.55 MB with the maximum memory reaching around 5.26 MB. Addionally, typically read and write I/O disk operations is about 803 Bytes per minute for reads and 2.64 KB per minute for writes.

Based on 40+ industry antivirus scanners, 30 of them detected the following malware.