Should I block it?

No, this file is 100% safe to run.

Additional versions

11.0.0.2321	8.33%
11.0.0.2114	16.67%
11.0.0.1719	8.33%
11.0.0.1620	66.67%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegEnumKeyExW, RegDeleteValueW, RegQueryInfoKeyW, RegEnumValueW, RegEnumValueA, RegCloseKey, RegOpenKeyExW, RegCreateKeyExW, RegSetValueExW, RegQueryValueExW

kernel32.dll

LockResource, LoadResource, FindResourceW, FindResourceExW, MultiByteToWideChar, FreeLibrary, LoadLibraryW, GetUserDefaultUILanguage, FindFirstFileW, GetLocaleInfoW, FindClose, FindNextFileW, CloseHandle, GetLastError, CreateMutexW, TerminateProcess, Process32NextW, OpenProcess, Process32FirstW, CreateToolhelp32Snapshot, SearchPathW, CreateDirectoryW, GetFileAttributesW, GetModuleFileNameW, GetProcAddress, SizeofResource, SetErrorMode, lstrlenA, GetThreadLocale, SetEnvironmentVariableA, CompareStringW, CompareStringA, CreateFileA, ReadFile, SetEndOfFile, GetTimeZoneInformation, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, CreateFileW, FlushFileBuffers, SetStdHandle, IsValidCodePage, IsValidLocale, EnumSystemLocalesA, GetUserDefaultLCID, GetDateFormatA, GetTimeFormatA, GetStringTypeW, InterlockedDecrement, InterlockedIncrement, GetVersionExW, VirtualAlloc, HeapReAlloc, SetConsoleCtrlHandler, InterlockedExchange, SetFilePointer, LoadLibraryA, InitializeCriticalSection, Sleep, FatalAppExitA, GetSystemTimeAsFileTime, GetCurrentProcessId, GetStringTypeA, LCMapStringW, LCMapStringA, GetLocaleInfoA, GetConsoleMode, GetConsoleCP, GetTickCount, QueryPerformanceCounter, RaiseException, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RtlUnwind, GetCommandLineA, HeapFree, GetVersionExA, HeapAlloc, GetProcessHeap, GetStartupInfoA, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetCurrentThreadId, GetCurrentThread, HeapSize, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, GetCPInfo, GetACP, GetOEMCP, EnterCriticalSection, LeaveCriticalSection, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, SetHandleCount, GetFileType, DeleteCriticalSection, HeapDestroy, HeapCreate, VirtualFree

ole32.dll

CreateClassMoniker, CoUninitialize, CoCreateInstance, CoInitialize, GetRunningObjectTable

shell32.dll

ShellExecuteExW, SHGetSpecialFolderPathW

shlwapi.dll

PathAddBackslashW, PathFindExtensionW, PathRemoveFileSpecW, PathCombineW, PathFileExistsW, PathAppendW

user32.dll

DestroyWindow, LoadStringW, DialogBoxParamW, FindWindowW, SendMessageW, wsprintfW, RegisterWindowMessageA, GetMessageW, TranslateMessage, DispatchMessageW, CreateWindowExW, RegisterClassExW, DefWindowProcW, UnregisterClassA, PostQuitMessage, EndDialog, IsDlgButtonChecked, GetSystemMetrics, GetWindowRect, SetWindowPos, PostMessageW

pdvd11serv.exe

PowerDVD RC Service by CyberLink (Signed)

Remove pdvd11serv.exe

Version:	11.0.0.2321
MD5:	2dde8442f687f88f7a67d43a778e6df9
SHA1:	7642d1e318752bcad897ef64d4a0ca784604bf0d
SHA256:	77043ce95a59651f550c00e81b18444aca39b7a19b63753093c9be130f8c0212

What is pdvd11serv.exe?

CyberLink PowerDVD is a media player for Microsoft Windows; several editions of the software are sold including "Ultra", "Deluxe" and "Standard". All editions support the viewing of DVD and the Ultra edition supports Blu-ray playback, including the playback of Blu-ray 3D content. It is often bundled with a variety of PC systems and peripheral devices (particularly optical drives).

Overview

pdvd11serv.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked. This is typically installed with the program CyberLink PowerDVD 11 published by CyberLink Corp.. The file is digitally signed by CyberLink which was issued by the VeriSign certificate authority (CA).

Details

File name:	pdvd11serv.exe
Publisher:	CyberLink Corp.
Product name:	PowerDVD RC Service
Typical file path:	C:\Program Files\cyberlink\powerdvd11\pdvd11serv.exe
Original name:	PDVDSERV.EXE
File version:	11.0.0.2321
Size:	229.29 KB (234,792 bytes)
Certificate
Issued to:	CyberLink
Authority (CA):	VeriSign
Effective date:	Monday, February 16, 2009
Expiration date:	Thursday, April 12, 2012
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

CyberLink PowerDVD 11

CyberLink Corp.

5% remove

CyberLink PowerDVD 11 is a media player for Microsoft Windows. PowerDVD is distributed on physical media or by download from the Cyberlink website. It is often bundled with a variety of PC systems and peripheral devices (particularly optical drives).

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'RemoteControl11' → C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe

Windows firewall allowed programs

Exceptions allow programs to access to the Internet through an outbound connections

Firewall exception for 'C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe'

Network connections

Access through an approved Windows firewall exception

[UDP] listens on port 49160

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00018545%	0.028634%
Kernel CPU:	0.00014677%	0.013761%
User CPU:	0.00003868%	0.014873%
Kernel CPU time:	296 ms/min	100,923,805ms/min
CPU cycles:	26,646/sec	17,470,203/sec
Memory
Private memory:	4.28 MB	21.59 MB
Private (maximum):	8.18 MB
Private (minimum):	7.06 MB
Non-paged memory:	4.28 MB	21.59 MB
Virtual memory:	86.05 MB	140.96 MB
Virtual memory (peak):	89.86 MB	169.69 MB
Working set:	7.79 MB	18.61 MB
Working set (peak):	9.53 MB	37.95 MB
Page faults:	4,161/min	2,039/min
I/O
I/O read transfer:	74 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	69 Bytes/sec	448.09 KB/min
I/O other operations:	4/sec	1,671/min
Resource allocations
Threads:	11	12
Handles:	184	600
GUI GDI count:	10	103
GUI GDI peak:	11	142
GUI USER count:	19	49
GUI USER peak:	20	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command line:	"C:\Program Files\cyberlink\powerdvd11\pdvd11serv.exe"
Owner:	User

Threads