Should I block it?

98%

Yes, 98% block recommendation.

Possible reasons:

Multiple malware detections

Performance resource utilization

Relationships

selectrebates.exe

By ShopAtHome.com (Signed)

Remove selectrebates.exe

Version:	5, 2, 0, 0
MD5:	0bf024e4f8fc508acfed092399f0fb4c
SHA1:	266a10bcd5fb64631e1093f4310b203880dd551a
SHA256:	e1ebf07d8cc5205aaea6487e3041d94cccbc68361bf92de208f37f42aea232f8

Warning 6 antivirus scanners has detected malware.

What is selectrebates.exe?

selectrebates.exe is part of the Shop at Home Toolbar. When loaded by IE, it will install a toolbar in the top of your Internet Explore web browser. By installing itself, the toolbar has full access to the a loaded web page's HTML content and knowledge of the URL the user is currently viewing; it can also manipuate these depending on the intended function of the toolbar.

About selectrebates.exe (from ShopAtHome.com)

“ShopAtHome.com is one of the largest websites offering free online coupons, grocery coupons, cash back rewards, free samples, restaurant coupons and contests. The site is unique from other online dea”

Details

File name:	selectrebates.exe
Typical file path:	C:\Program Files\selectrebates\selectrebates.exe
File version:	5, 2, 0, 0
Size:	865.97 KB (886,752 bytes)
Certificate
Issued to:	ShopAtHome.com
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

ShopAtHome.com Toolbar

Belcaro Group Inc.

64% remove

The ShopAtHome.com Toolbar will have the ability to inject such content into search results in your browser. Such content will be identified as ShopAtHome.com content, and you will have the ability to disable this feature of the Toolbar. The Shopping Toolbar will have the ability to inject such content into search results in your browser. Such content will be identified as ShopAtHome.com content, and you will have the ability to disable...

ShopAtHome SelectRebates

Select Rebates

81% remove

ShopAtHome SelectRebates is a potentially unwanted browser hijacker that runs in the web browser as a toolbar and web extension. The web extension is primarily designed to take control of the user's browser in order to modify the search provider and redirect web searches to the search engine partner the publisher has a revenue relationship with. In doing so, the toolbar performs a number of behaviors in order to maximize the potential...

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'SelectRebates' → C:\Program Files\SelectRebates\SelectRebates.exe

Malware detections

Based on 40+ industry antivirus scanners, 6 of them detected the following malware.

Antivirus engine	Engine version	Detection
Fortinet	5.0.43.0	Adware/ShopAtHomeSelect
F-Prot	v6.4.7.1.166	W32/SahPopup.A.gen!Eldorado
K7 AntiVirus	9.164.8467	Adware
Norman	7.00.22	ShopAtHome.A!genr
Total Defense	37.0.10361	Win32/SillyAd.A
Vba32 AntiVirus	3.12.20.2	AdWare.Sahat.er

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.04744551%	0.028634%
Kernel CPU:	0.01769186%	0.013761%
User CPU:	0.02975365%	0.014873%
Kernel CPU time:	867 ms/min	100,923,805ms/min
Context switches:	4/sec	284/sec
Memory
Private memory:	39.46 MB	21.59 MB
Private (maximum):	7.98 MB
Private (minimum):	6.75 MB
Non-paged memory:	39.46 MB	21.59 MB
Virtual memory:	171.75 MB	140.96 MB
Virtual memory (peak):	177.87 MB	169.69 MB
Working set:	5.67 MB	18.61 MB
Working set (peak):	49.06 MB	37.95 MB
Resource allocations
Threads:	12	12
Handles:	394	600
GUI GDI count:	30	103
GUI GDI peak:	31	142
GUI USER count:	29	49
GUI USER peak:	31	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command line:	"C:\Program Files\selectrebates\selectrebates.exe"
Owner:	User

Threads