Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExW, RegEnumValueW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW
kernel32.dll
GetTickCount, CloseHandle, WaitForSingleObject, lstrlenW, RaiseException, InitializeCriticalSection, DeleteCriticalSection, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, GetLastError, GetProcAddress, GetModuleHandleW, lstrcmpiW, GetModuleFileNameW, Sleep, CreateThread, CreateEventW, InterlockedIncrement, InterlockedDecrement, SetEvent, FreeLibrary, MultiByteToWideChar, GetCurrentThreadId, GetCommandLineW, EnterCriticalSection, LeaveCriticalSection, PostQueuedCompletionStatus, WideCharToMultiByte, CreateIoCompletionPort, lstrlenA, InterlockedExchange, GetQueuedCompletionStatus, ResetEvent, GetSystemInfo, TerminateThread, GetExitCodeThread, GetPrivateProfileSectionNamesW, GetConsoleOutputCP, WriteConsoleA, FlushFileBuffers, SetStdHandle, GetLocaleInfoA, GetCurrentProcessId, WriteConsoleW, CreateFileW, CreateFileA, SetEndOfFile, ReadFile, LoadLibraryExW, GetStringTypeW, GetStringTypeA, LCMapStringA, LoadLibraryA, InitializeCriticalSectionAndSpinCount, SetFilePointer, GetSystemTimeAsFileTime, QueryPerformanceCounter, GetStartupInfoA, GetFileType, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetConsoleMode, GetConsoleCP, GetModuleHandleA, LCMapStringW, SetLastError, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, IsValidCodePage, GetOEMCP, GetACP, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, RtlUnwind, ExitThread, VirtualProtect, VirtualAlloc, VirtualQuery, GetStartupInfoW, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, VirtualFree, HeapCreate, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, GetCPInfo, SetHandleCount
ole32.dll
CoInitialize, CoUninitialize, CoTaskMemAlloc, CoTaskMemRealloc, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemFree, StringFromGUID2, CoCreateInstance, CoMarshalInterThreadInterfaceInStream, CoUnmarshalInterface
user32.dll
CharNextW, GetMessageW, PostThreadMessageW, CharUpperW, LoadStringW, TranslateMessage, DispatchMessageW
wininet.dll
InternetConnectW, HttpOpenRequestW, HttpSendRequestW, InternetSetOptionW, InternetReadFile, HttpQueryInfoW, InternetCloseHandle, InternetOpenW

tbhelper2.exe

Internet Explorer Toolbar by Coupons.com (Signed)

Remove tbhelper2.exe
Version:   4.3.0.23
MD5:   66a06a0d648e4025779e99d36b1d8c78
SHA1:   045e816d6b09c3efa843fedaf59a885c5ae6fca4
SHA256:   7756767b72b2792a5b532e79142da933af34f5eb03298d235e01944d2517f455

What is tbhelper2.exe?

The Coupons.com Toolbar is a web browser add-in that analyzes web sites your browser visits and attempts to find discount deals associated with the merchant's product offerings. If Toolbar sees a corresponding deal, it will attempt to inject an affiliate identifier in order to collect commissions if a purchase is made while trying to offer you the best price of that particular product or show you an alternative product.

Overview

tbhelper2.exe executes as a process with the local user's privileges typically within the context of its parent svchost.exe (Host Process for Windows Services by Microsoft Corporation). It is installed with a couple of know programs including CouponBar published by Coupons.com Incorporated and CouponBar published by Coupons.com Incorporated. The file is digitally signed by Coupons.com which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Ultimate N (6.1.7601.65536).

DetailsDetails

File name:tbhelper2.exe
Product name:Internet Explorer Toolbar
Description:Toolbar Helper Module
Typical file path:C:\Program Files\coupons.com couponbar\tbhelper2.exe
Original name:TbHelper.exe
File version:4.3.0.23
Size:199.43 KB (204,216 bytes)
Certificate
Issued to:Coupons.com
Authority (CA):VeriSign
Effective date:Monday, September 10, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Coupons.com Incorporated
  74% remove
The Coupons.com CouponBar is a web browser add-in that analyzes web sites your browser visits and attempts to find discount deals associated with the merchant's product offerings. If CouponBar sees a corresponding deal, it will attempt to inject an affiliate identifier in order to collect commissions if a purchase is made while trying to offer you the best price of that particular product or show you an alternative product even if it is...

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00002069%
0.028634%
Kernel CPU:0.00001655%
0.013761%
User CPU:0.00000414%
0.014873%
Kernel CPU time:100 ms/min
100,923,805ms/min
Memory
Private memory:1.84 MB
21.59 MB
Private (maximum):6.13 MB
Private (minimum):72 KB
Non-paged memory:1.84 MB
21.59 MB
Virtual memory:64.51 MB
140.96 MB
Virtual memory (peak):68.59 MB
169.69 MB
Working set:964 KB
18.61 MB
Working set (peak):6.13 MB
37.95 MB
Resource allocations
Threads:6
12
Handles:218
600
GUI GDI count:9
103
GUI GDI peak:9
142
GUI USER count:3
49
GUI USER peak:5
71

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command line:"C:\Program Files\coupons.com couponbar\tbhelper2.exe" -embedding
Owner:User
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

ResourcesThreads

Averages
 
TbHelper2.exe (main module)
Total CPU:0.00000994%
0.272967%
Kernel CPU:0.00000773%
0.107585%
User CPU:0.00000221%
0.165382%
CPU cycles:255/sec
5,741,424/sec
Memory:216 KB
1.16 MB
ntdll.dll
Total CPU:0.00000736%
Kernel CPU:0.00000736%
User CPU:0.00000000%
CPU cycles:142/sec
Memory:1.23 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate N 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE