Should I block it?

40%
40% of PCs block this file from running.
Possible reason:
Performance resource utilization

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegSetValueExA, RegCreateKeyExA, InitializeSecurityDescriptor, OpenThreadToken, ImpersonateNamedPipeClient, DeleteService, ControlService, OpenServiceA, CloseServiceHandle, QueryServiceStatus, StartServiceA, CreateServiceA, OpenSCManagerA, DeregisterEventSource, ReportEventA, RegisterEventSourceA, SetServiceStatus, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, RegCloseKey, ConvertStringSecurityDescriptorToSecurityDescriptorA, RevertToSelf, DuplicateTokenEx
kernel32.dll
EnterCriticalSection, LeaveCriticalSection, GetCurrentThread, GetCurrentThreadId, CreateDirectoryA, CopyFileA, DeleteFileA, MoveFileA, GetLocalTime, _lopen, _lcreat, _llseek, _lwrite, _lclose, WaitForMultipleObjects, CreateEventA, CreateNamedPipeA, ResetEvent, SetLastError, ConnectNamedPipe, ReadFile, GetOverlappedResult, WriteFile, DisconnectNamedPipe, SetEvent, ExpandEnvironmentStringsA, FreeResource, GetVersionExA, EncodePointer, DecodePointer, ExitThread, CreateThread, HeapAlloc, HeapFree, HeapSetInformation, GetStartupInfoW, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapSize, GetProcAddress, GetModuleHandleW, DeleteCriticalSection, GetCPInfo, InterlockedIncrement, InterlockedDecrement, InitializeCriticalSection, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, WideCharToMultiByte, LCMapStringW, MultiByteToWideChar, RtlUnwind, IsProcessorFeaturePresent, GetStdHandle, GetModuleFileNameW, HeapCreate, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapReAlloc, LoadLibraryW, GetStringTypeW, RaiseException, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleW, FlushFileBuffers, CreateFileW, WaitForSingleObject, CloseHandle, FindResourceA, LoadResource, LockResource, FormatMessageA, GetLastError, LocalFree, FreeLibrary, Sleep, lstrcmpiA, GetModuleFileNameA, LoadLibraryExA, LocalAlloc, GetCommandLineA, lstrcpyA, lstrlenA, lstrcpynA, ExitProcess, GetACP
shlwapi.dll
SHDeleteValueA, SHDeleteKeyA
user32.dll
wsprintfA

1gbarsvc.exe

PRODUCTVERS_NAME by Mindspark Interactive Network (Signed)

Remove 1gbarsvc.exe
Version:   1, 0, 1, 0
MD5:   42a3968959e3803d204b30496f215b14
SHA1:   1a17de78283c88a1f2e9bd86c734067beee6e43b
SHA256:   58447c726ef0e003423e87cd410570e90e292bae2c69657cfcd60255b788b19c

Overview

1gbarsvc.exe runs as a service under the name InboxAceService (InboxAce_1gService) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including WeatherBlink Firefox Toolbar published by Mindspark Interactive Network, WeatherBlink Internet Explorer Toolbar from Mindspark Interactive Network and WeatherBlink Internet Explorer Toolbar by Mindspark Interactive Network. The file is digitally signed by Mindspark Interactive Network which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Ultimate (6.1.7601.65536). Note, some antivirus scanners have flagged this file, however it is not necessarily considered malware (see below for details).

DetailsDetails

File name:1gbarsvc.exe
Publisher:COMPANYVERS_NAME
Product name:PRODUCTVERS_NAME
Description:PRODUCTVERS_TITLE
Typical file path:C:\Program Files\InboxAce_1g\bar\1.bin\1gbarsvc.exe
Original name:TWOLETTERPREFIXVERSsvc.exe
File version:1, 0, 1, 0
Product version:2, 3, 0, 0
Size:85.07 KB (87,112 bytes)
Build date:7/10/2013 3:47 PM
Certificate
Issued to:Mindspark Interactive Network
Authority (CA):VeriSign
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Mindspark Interactive Network
  70% remove
WeatherBlink Firefox Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is designed not only to modify the search provider but to protect it so that it remains the default browser search engine. It is typically installed via a bundled offer within a third-party software distribution. As for distribution, the toolbar is typi...
Mindspark Interactive Network
  61% remove
WeatherBlink Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is designed not only to modify the search provider but to protect it so that it remains the default browser search engine. It is typically installed via a bundled offer within a third-party software distribution. As for distribution, the toolb...
Mindspark Interactive Network
  73% remove
Installs a potentailly unwanted Ask.com powered toolbr - "As part of the download process for the Toolbar, you may be given the option to reset your homepage and/or reset your new tab page to an Ask® home page and new tab product. This provides relevant links and results when you make a search request in your browser address bar or if your browser address (DNS) request is invalid, misspelled or incorrectly formatted. This is a search bo...
Mindspark Interactive Network
  70% remove
This is a web browser extension/toolbar that will modify the user's home page and search provider to Ask.com.

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'InboxAce_1gService' (InboxAceService)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00000127%
0.028634%
Kernel CPU:0.00000127%
0.013761%
Kernel CPU time:16 ms/min
100,923,805ms/min
Memory
Private memory:828 KB
21.59 MB
Private (maximum):92 KB
Private (minimum):88 KB
Non-paged memory:828 KB
21.59 MB
Virtual memory:17.15 MB
140.96 MB
Virtual memory (peak):19.15 MB
169.69 MB
Working set:96 KB
18.61 MB
Working set (peak):2.64 MB
37.95 MB
Resource allocations
Threads:4
12
Handles:44
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:C:\progra~1\inboxa~2\bar\1.bin\1gbarsvc.exe
Owner:SYSTEM
Windows Service
Service name:InboxAce_1gService
Display name:InboxAceService
Type:Win32OwnProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 100.00%

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE