Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
OpenThreadToken, RevertToSelf, RegCreateKeyExA, RegSetValueExA, RegCloseKey, OpenServiceA, ControlService, DeleteService, OpenSCManagerA, CreateServiceA, StartServiceA, QueryServiceStatus, CloseServiceHandle, RegisterEventSourceA, ReportEventA, DeregisterEventSource, SetServiceStatus, RegisterServiceCtrlHandlerA, StartServiceCtrlDispatcherA, ImpersonateNamedPipeClient, InitializeSecurityDescriptor, DuplicateTokenEx
kernel32.dll
FreeLibrary, FormatMessageA, LoadLibraryExA, LockResource, LoadResource, FindResourceA, CloseHandle, CreateDirectoryA, CopyFileA, DeleteFileA, MoveFileA, _lclose, _lwrite, _llseek, _lcreat, _lopen, GetLocalTime, GetModuleFileNameA, GetCurrentThreadId, WaitForSingleObject, WaitForMultipleObjects, GetProcAddress, DisconnectNamedPipe, WriteFile, GetOverlappedResult, ReadFile, ConnectNamedPipe, SetLastError, ResetEvent, CreateNamedPipeA, CreateEventA, SetEvent, FreeResource, ExpandEnvironmentStringsA, GetVersionExA, GetLastError, LocalAlloc, lstrcpyA, lstrcmpiA, Sleep, LocalFree, EnterCriticalSection, LeaveCriticalSection, CreateThread, lstrlenA, HeapFree, HeapReAlloc, GetProcessHeap, HeapAlloc, DebugBreak, DeleteCriticalSection, InitializeCriticalSection, GetModuleHandleA, GetCommandLineA, ExitProcess, GetStartupInfoA, GetCurrentThread, lstrcpynA
shlwapi.dll
SHDeleteValueA, SHDeleteKeyA
user32.dll
CharNextA, wsprintfA

4wbarsvc.exe

PRODUCTVERS_NAME by Mindspark Interactive Network (Signed)

Remove 4wbarsvc.exe
Version:   1, 0, 1, 0
MD5:   72f8c1568a56c7059cb1074a7e529dc6
SHA1:   a2c21b1f2718a7d022910af00a741ed01221464d
SHA256:   c9df31171fa410895972d19ea51f6350fc3b51cb02a51e42e17ae341563b4d4b
Warning 4 antivirus scanners has detected malware.

What is 4wbarsvc.exe?

My Web Search by the Mindspark Interactive Network is a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser. The My Web Search toolbar could slow down your PC and uses cookies to track your web surfing usage and habits.

About 4wbarsvc.exe (from Mindspark Interactive Network)

MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it. MyWebSearch allows you to search the web directly

DetailsDetails

File name:4wbarsvc.exe
Publisher:COMPANYVERS_NAME
Product name:PRODUCTVERS_NAME
Description:PRODUCTVERS_TITLE
Typical file path:C:\Program Files\Retrogamer_4w\bar\1.bin\4wbarsvc.exe
Original name:TWOLETTERPREFIXVERSsvc.exe
File version:1, 0, 1, 0
Product version:2, 3, 0, 0
Size:41.53 KB (42,528 bytes)
Certificate
Issued to:Mindspark Interactive Network
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • MyWebFace_5aService

MalwareMalware detections

Based on 40+ industry antivirus scanners, 4 of them detected the following malware.
Antivirus engineEngine versionDetection
avast! 6.0.1289.0 Win32:FunWeb-K [PUP]
AVG 2014.0.3629 AdInstaller.FunWeb
Clam AntiVirus 0.97.3.0 Adware.MyWebSearch-18
VIPRE Antivirus 15296 MyWebSearch.J (v) (not malicious)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00075828%
0.028634%
Kernel CPU:0.00056794%
0.013761%
User CPU:0.00019034%
0.014873%
Kernel CPU time:23 ms/min
100,923,805ms/min
CPU cycles:750/sec
17,470,203/sec
Memory
Private memory:685 KB
21.59 MB
Private (maximum):1.07 MB
Private (minimum):1021 KB
Non-paged memory:685 KB
21.59 MB
Virtual memory:19.68 MB
140.96 MB
Virtual memory (peak):24.25 MB
169.69 MB
Working set:985 KB
18.61 MB
Working set (peak):2.41 MB
37.95 MB
Page faults:941/min
2,039/min
I/O
I/O read transfer:10 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:4
12
Handles:89
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command lines:
  • C:\progra~1\iwon_5k\bar\1.bin\5kbarsvc.exe
  • C:\progra~1\mywebf~2\bar\1.bin\5abarsvc.exe
  • C:\progra~2\retrog~2\bar\1.bin\4wbarsvc.exe
Owner:SYSTEM
Windows Service
Display name:MyWebFace_5aService
Parent process:services.exe (Services and Controller app by Microsoft)

ResourcesThreads

Averages
 
sechost.dll
Total CPU:0.00045916%
0.272967%
Kernel CPU:0.00045916%
0.107585%
User CPU:0.00000000%
0.165382%
CPU cycles:3,600/sec
5,741,424/sec
Memory:100 KB
1.16 MB
4wbarsvc.exe (PRODUCTVERS_NAME by COMPANYVERS_NAME)
Total CPU:0.00009189%
Kernel CPU:0.00009189%
User CPU:0.00000000%
CPU cycles:828/sec
Memory:36 KB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate N 57.14%
Windows 7 Home Premium 21.43%
Windows 7 Ultimate 7.14%
Windows 7 Enterprise 7.14%
Windows Vista Home Premium 7.14%

Distribution by countryDistribution by country

United States installs about 90.00% of PRODUCTVERS_NAME.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE