Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

6.14.11.1173 0.20%
6.14.11.1169 2.36%
6.14.11.1165 0.20%
6.14.11.1164 1.38%
6.14.11.1164 0.98%
6.14.11.1161 0.20%
6.14.11.1159 1.38%
6.14.11.1159 1.38%
6.14.11.1159 0.39%
6.14.11.1159 0.20%
6.14.11.1154 0.20%
6.14.11.1143 0.59%
6.14.11.1143 0.20%
6.14.11.1143 2.56%
6.14.11.1143 0.20%
6.14.11.1143 0.39%
6.14.11.1143 0.20%
6.14.11.1143 0.39%
6.14.11.1143 0.20%
6.14.11.1143 0.20%
6.14.11.1143 0.20%
6.14.11.1137 3.94%
6.14.11.1137 0.59%
6.14.11.1137 0.59%
6.14.11.1137 0.39%
View more

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExA, RegisterEventSourceA, ReportEventA, RegOpenCurrentUser, RegDeleteKeyA, RegOpenKeyExA, RegGetValueA, RegDeleteValueA, RegCreateKeyExA, RegSetValueExA, RegCloseKey, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, GetCurrentHwProfileA, RegGetValueW, RegSetValueExW, RevertToSelf, ImpersonateLoggedOnUser, RegDeleteTreeA
dwmapi.dll
DwmIsCompositionEnabled
gdi32.dll
D3DKMTCloseAdapter, D3DKMTQueryAdapterInfo, D3DKMTInvalidateActiveVidPn, D3DKMTOpenAdapterFromHdc, D3DKMTEscape, SetDeviceGammaRamp, CreateDCA, DeleteDC, D3DKMTPollDisplayChildren
kernel32.dll
VirtualProtect, IsValidLocale, SetConsoleCtrlHandler, GetLocaleInfoA, InterlockedExchange, LoadLibraryExA, InitializeCriticalSection, CreateFileA, RaiseException, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, EnumSystemLocalesA, GetSystemInfo, VirtualQuery, GetTimeZoneInformation, SetEndOfFile, GetProcessHeap, ReadFile, GetLocaleInfoW, CompareStringA, CompareStringW, SetEnvironmentVariableA, IsValidCodePage, GetUserDefaultLCID, GetDateFormatA, GetTimeFormatA, GetStringTypeW, GetStringTypeA, LCMapStringW, MultiByteToWideChar, LCMapStringA, HeapReAlloc, VirtualAlloc, SetFilePointer, FatalAppExitA, FlushFileBuffers, GetConsoleMode, GetConsoleCP, RtlUnwind, LeaveCriticalSection, EnterCriticalSection, GetSystemTimeAsFileTime, GetCurrentProcessId, QueryPerformanceCounter, VirtualFree, HeapCreate, HeapDestroy, DeleteCriticalSection, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetModuleFileNameA, GetStdHandle, WriteFile, ExitProcess, GetModuleHandleA, GetCurrentThread, SetLastError, TlsFree, TlsSetValue, MapViewOfFile, OpenFileMappingA, Sleep, OutputDebugStringA, WTSGetActiveConsoleSessionId, GetProcAddress, LoadLibraryA, FreeLibrary, CreateProcessA, LocalFree, GetLocalTime, GetTickCount, CloseHandle, GetExitCodeThread, CreateEventA, OpenEventA, WaitForSingleObject, WaitForMultipleObjects, SetEvent, ResetEvent, GetLastError, GetVersionExA, GetSystemDirectoryA, CreateThread, SetThreadPriority, CreateMutexA, OpenMutexA, ReleaseMutex, GetCurrentThreadId, WideCharToMultiByte, GetCommandLineA, GetStartupInfoA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, HeapFree, HeapAlloc, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, GetModuleHandleW, TlsGetValue, TlsAlloc, InitializeCriticalSectionAndSpinCount, ReadConsoleW, HeapSize, LoadLibraryExW, IsProcessorFeaturePresent, OpenProcess, lstrlenW, QueryFullProcessImageNameW, GetSystemPowerStatus, WinExec
ole32.dll
PropVariantClear, CoCreateInstance, CoUninitialize, CoInitialize
powrprof.dll
PowerGetActiveScheme, PowerWriteACDefaultIndex, PowerWritePossibleValue, PowerWritePossibleFriendlyName, PowerCreatePossibleSetting, PowerWriteFriendlyName, PowerCreateSetting, PowerRemovePowerSetting, PowerReadDCValueIndex, PowerReadACValueIndex, PowerSettingAccessCheck, PowerEnumerate, PowerWriteDCValueIndex, PowerWriteACValueIndex, PowerSetActiveScheme, PowerWriteDCDefaultIndex, GetPwrCapabilities, PowerReadSettingAttributes, PowerWriteSettingAttributes, PowerDeterminePlatformRole
setupapi.dll
CM_Reenumerate_DevNode, CM_Locate_DevNodeA, SetupDiDestroyDeviceInfoList, SetupDiEnumDeviceInfo, SetupDiGetClassDevsA, CM_Get_Device_IDA, CM_Get_Parent, CM_Get_DevNode_Status, SetupDiGetDeviceRegistryPropertyA, SetupDiCallClassInstaller, SetupDiSetClassInstallParamsA, SetupDiOpenDeviceInfoA, SetupDiGetDeviceInstanceIdA, CM_Get_Device_ID_ExA, CM_Request_Eject_PC, CM_Get_Child_Ex, SetupDiGetHwProfileList
shlwapi.dll
wnsprintfW
user32.dll
DestroyWindow, PostQuitMessage, DefWindowProcA, UpdateWindow, ShowWindow, CreateWindowExA, RegisterClassA, DispatchMessageA, GetThreadDesktop, OpenInputDesktop, SetThreadDesktop, CloseDesktop, GetForegroundWindow, UnregisterDeviceNotification, RegisterDeviceNotificationA, PostThreadMessageA, KillTimer, SetTimer, EnumDisplaySettingsExA, EnumWindows, GetPropA, RedrawWindow, EnumDisplayDevicesA, SendInput, EnumDisplaySettingsA, ChangeDisplaySettingsExA, PostMessageA, GetMessageA, RegisterWindowMessageA, BroadcastSystemMessageA, SystemParametersInfoA, UnregisterPowerSettingNotification, RegisterPowerSettingNotification, FindWindowA, SendMessageA, ChangeWindowMessageFilter, SetSysColors, GetSysColor
userenv.dll
UnloadUserProfile, LoadUserProfileA
wtsapi32.dll
WTSFreeMemory, WTSQueryUserToken, WTSQuerySessionInformationA, WTSRegisterSessionNotification

ATIECLXX.exe

AMD External Events by AMD

Remove ATIECLXX.exe
Version:   6.14.11.1143
MD5:   97fba57dabda5ce2ef2000b7189f9e65
SHA1:   d50dbc7573fc022dcb9f78e302586b46ac82c87e
SHA256:   e96215c56adc094818db849b114a0c48bd0c8e9c2fd619bf859d633d2837e5b3

What is ATIECLXX.exe?

The files atiesrxx.exe and atieclxx.exe are both associated with the AMD External Events Service Module, which is part of the ATI display driver package.

Overview

atieclxx.exe executes as a process under the SYSTEM account with extensive privileges (the system and the administrator accounts have the same file privileges) typically within the context of its parent atiesrxx.exe (AMD External Events by AMD). It has been configured with a firewall exception which allows both inbound and outbound network communication without being blocked.

DetailsDetails

File name:atieclxx.exe
Publisher:AMD
Product name:AMD External Events
Description:AMD External Events Client Module
Typical file path:C:\Windows\System32\atieclxx.exe
File version:6.14.11.1143
Size:481 KB (492,544 bytes)
Build date:3/29/2013 3:34 AM
Digital DNA
Entropy:6.438970
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Windows firewall allowed program
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Windows\system32\atieclxx.exe'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00163875%
0.028634%
Kernel CPU:0.00122416%
0.013761%
User CPU:0.00041459%
0.014873%
Kernel CPU time:2,574,157 ms/min
100,923,805ms/min
Memory
Private memory:1.85 MB
21.59 MB
Private (maximum):5.37 MB
Private (minimum):2.44 MB
Non-paged memory:1.85 MB
21.59 MB
Virtual memory:61.9 MB
140.96 MB
Virtual memory (peak):65.4 MB
169.69 MB
Working set:3.24 MB
18.61 MB
Working set (peak):5.53 MB
37.95 MB
Resource allocations
Threads:11
12
Handles:153
600
GUI GDI count:7
103
GUI GDI peak:12
142
GUI USER count:10
49
GUI USER peak:10
71

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:atieclxx
Owner:SYSTEM
Parent process:atiesrxx.exe (AMD External Events by AMD)

ResourcesThreads

Averages
 
atieclxx.exe (main module)
Total CPU:0.00018294%
0.272967%
Kernel CPU:0.00015406%
0.107585%
User CPU:0.00002889%
0.165382%
CPU cycles:2,459/sec
5,741,424/sec
Memory:500 KB
1.16 MB
MMDevApi.dll
Total CPU:0.00004814%
Kernel CPU:0.00004814%
User CPU:0.00000000%
CPU cycles:168/sec
Memory:228 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 42.50%
Windows 7 Ultimate 18.00%
Windows 8 10.50%
Windows 8.1 9.00%
Windows 7 Professional 6.00%
Windows 8.1 Pro 3.50%
Windows 7 Home Basic 3.50%
Windows 8 Single Language 1.50%
Windows 8 Pro 1.50%
Windows 8.1 Enterprise 1.00%
Windows Vista Home Premium 1.00%
Windows Seven Black Edition 0.50%
Windows 7 Starter 0.50%
Windows 8.1 Pro with Media Center 0.50%
Windows Vista Ultimate 0.50%

Distribution by countryDistribution by country

United States installs about 45.00% of AMD External Events.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 27.92%
Toshiba 16.67%
Acer 15.42%
ASUS 10.83%
Dell 10.83%
Lenovo 5.83%
Samsung 3.33%
Sony 3.33%
GIGABYTE 2.08%
Medion 0.83%
Gateway 0.83%
MSI 0.83%
Apple 0.83%
Alienware 0.42%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE