What is the "ibmpmsvc.exe" process on windows 7? Is the "ibmpmsvc.exe" process a virus? Can I terminate the "ibmpmsvc.exe" process?

"ibmpmsvc.exe" process represents "Lenovo Power Management Service" program. "ibmpmsvc.exe" process is for "ThinkPad PM Service", which is the power management driver for IBM (Lenovo) laptops. It provides support for the use of four keys on the Thinkpad keyboard with blue key tops - F2, F3, F4 & F12 to control standby and hibernate functions.

"ibmpmsvc.exe" process is normally running under the parent process "services" as shown in the process tree below:

Boot
   wininit
      services
         ibmpmsvc

On the Processes tab of "Task Manager", "ibmpmsvc.exe" process may be listed as:

Image Name                 Memory   Description
--------------------   ----------   -----------
ibmpmsvc.exe              3,524 K   Lenovo Power Management Service

Additional information about "ibmpmsvc.exe" process:

Command line:
   C:\windows\system32\ibmpmsvc.exe

Programe file information:
   Name: ibmpmsvc.exe
   Location: C:\windows\system32\ibmpmsvc.exe
   Description: Lenovo Power Management Service
   Version: 1.67.10.20
   Size: 148208 bytes
   Last modified: 8/17/2015 5:18:28 AM
   Company Name: Lenovo.
   
Some data files used:
C:\Windows\System32
C:\Windows\System32\en-US\setupapi.dll.mui

Some registry keys used:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
HKLM\SYSTEM\ControlSet001\Control\Nls\Sorting\Versions
HKLM\SYSTEM\ControlSet001\Control\SESSION MANAGER
HKU\.DEFAULT\Control Panel\International
HKLM\SYSTEM\ControlSet001\services\IBMPMSVC\Parameters\CurrentSetting
HKLM\SYSTEM\ControlSet001\services\IBMPMSVC\Parameters\OverrideSetting
HKLM\HARDWARE\DESCRIPTION\System\BIOS

Some DLL libraries used:
C:\windows\SYSTEM32\ntdll.dll
C:\windows\system32\kernel32.dll
C:\windows\system32\KERNELBASE.dll
C:\windows\system32\ADVAPI32.dll
C:\windows\system32\msvcrt.dll
C:\windows\SYSTEM32\sechost.dll
C:\windows\system32\RPCRT4.dll
C:\windows\system32\USER32.dll
C:\windows\system32\GDI32.dll
C:\windows\system32\LPK.dll

"ibmpmsvc.exe" process is not a virus. You can terminate "ibmpmsvc.exe" process or stop "ThinkPad PM Service". But you will lose the power management quick keys.

 

⇒System Service Processes on Windows 7

⇒⇒Windows 7 Processes Tutorials