Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

31.6.6.4514	1.89%
31.6.3.286	1.89%
31.6.0.3083	1.89%
31.4.2.2430	5.66%
31.4.1.1692	24.53%
31.2.0.1139	11.32%
31.1.0.607	3.77%
31.0.1.478	13.21%
31.0.0.44	5.66%
30.5.0.871	11.32%
30.3.2.456	1.89%
30.3.0.3831	13.21%
30.1.0.2671	1.89%
11.3.0.1794	1.89%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

RegNotifyChangeKeyValue, RegFlushKey, RegDeleteKeyW, RegQueryInfoKeyW, RegEnumValueW, RegDeleteValueW, RegEnumKeyExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegSetValueExW, RegCloseKey

crypt32.dll

CryptMsgGetParam, CertFindCertificateInStore, CertGetNameStringW, CryptQueryObject, CertCloseStore, CryptMsgClose, CryptDecodeObject, CertFreeCertificateContext

gdi32.dll

CreatePen, GetDeviceCaps, CreateCompatibleBitmap, GetStockObject, SetBkMode, SetTextColor, CreateFontIndirectW, DeleteObject, GetObjectW, SetDIBColorTable, SelectObject, DeleteDC, CreateCompatibleDC, GetDIBColorTable, StretchBlt, GetTextExtentPoint32W, CreateDIBSection, Rectangle, CreateSolidBrush, BitBlt

gdiplus.dll

GdiplusShutdown, GdiplusStartup, GdipBitmapUnlockBits, GdipBitmapLockBits, GdipGetImageGraphicsContext, GdipCreateBitmapFromStream, GdipGetImagePalette, GdipGetImagePaletteSize, GdipGetImagePixelFormat, GdipGetImageHeight, GdipGetImageWidth, GdipDisposeImage, GdipDeleteGraphics, GdipAlloc, GdipFree, GdipDrawImageI, GdipCloneImage, GdipCreateBitmapFromScan0

kernel32.dll

DllMain

msimg32.dll

TransparentBlt, AlphaBlend

ole32.dll

CoUninitialize, CoInitialize, CreateStreamOnHGlobal, StringFromGUID2, OleLockRunning, CoGetClassObject, CLSIDFromProgID, CLSIDFromString, CoCreateInstance, CoTaskMemAlloc, OleInitialize, OleUninitialize, CoTaskMemFree, CoCreateGuid, CoReleaseServerProcess, CoAddRefServerProcess, CoTaskMemRealloc

oleacc.dll

GetRoleTextW, AccessibleObjectFromWindow, AccessibleChildren, WindowFromAccessibleObject, AccessibleObjectFromEvent

psapi.dll

GetModuleFileNameExW

shell32.dll

SHGetFolderPathW, SHAppBarMessage, ShellExecuteW, SHGetSpecialFolderPathW

shlwapi.dll

StrStrIW, UrlCreateFromPathW, PathFileExistsW

user32.dll

EndPaint, GetDC, ReleaseDC, UpdateWindow, ShowWindow, IsWindowVisible, SetTimer, PostMessageW, GetWindowLongW, BeginPaint, UnregisterClassA, GetWindowInfo, LoadStringW, LoadAcceleratorsW, TranslateAcceleratorW, GetSysColorBrush, PostQuitMessage, SetForegroundWindow, WindowFromPoint, GetClientRect, MoveWindow, SetWindowLongW, SendMessageW, EnableWindow, CallNextHookEx, SendMessageTimeoutW, MessageBoxW, SetRectEmpty, IsDlgButtonChecked, CheckDlgButton, GetWindow, EnumWindows, DestroyWindow, DrawTextW, DefWindowProcW, GetSysColor, CreateWindowExW, SetWindowPos, SendDlgItemMessageW, SetWindowContextHelpId, IsWindow, UnhookWinEvent, MapDialogRect, EndDialog, CharNextW, ClientToScreen, ScreenToClient, InvalidateRect, InvalidateRgn, RedrawWindow, SetCapture, IsChild, GetParent, GetDlgItem, BringWindowToTop, AnimateWindow, SystemParametersInfoW, PostThreadMessageW, UnhookWindowsHookEx, SetWindowsHookExW, IsDialogMessageW, KillTimer, FindWindowExW, GetClassNameW, ReleaseCapture, FillRect, CallWindowProcW, GetDesktopWindow, DestroyAcceleratorTable, GetFocus, SetFocus, GetClassInfoExW, LoadCursorW, FindWindowW, MsgWaitForMultipleObjects, PeekMessageW, GetWindowThreadProcessId, EnumChildWindows, PtInRect, SetDlgItemTextW, LoadImageW, DrawIconEx, GetActiveWindow, DialogBoxIndirectParamW, SetLayeredWindowAttributes, TranslateMessage, DispatchMessageW, GetMessageW, SetWinEventHook, CreateDialogIndirectParamW, RegisterWindowMessageW, GetWindowTextLengthW, SetWindowTextW, GetWindowTextW, GetWindowRect, CreateAcceleratorTableW, RegisterClassExW, OffsetRect, AdjustWindowRectEx, GetMenu

version.dll

GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW

wininet.dll

HttpSendRequestW, InternetSetOptionW, InternetReadFile, InternetCloseHandle, InternetCrackUrlW, InternetOpenW, HttpQueryInfoW, HttpOpenRequestW, InternetConnectW, InternetCanonicalizeUrlW

wintrust.dll

WinVerifyTrust

wtsapi32.dll

WTSEnumerateProcessesW, WTSFreeMemory

TBNotifier.exe

Ask TBNotifier by APN LLC (Signed)

Remove TBNotifier.exe

Version:	30.1.0.2671
MD5:	308d3fc83460b828a1181d042291cb4c
SHA1:	1a8be30e7674de17badf0faa7e8e90ca1ac671b2
SHA256:	b256198f74ec737888cc9696205aaf6094623f1ca11998ed474853fa879571e4

About TBNotifier.exe (from APN LLC)

“The Ask Toolbar Notifier is a client process which runs as part of the Ask Toolbar. The Notifier's job is to help instruct you during the toolbar installation and browser upgrades on your computer.”

Overview

tbnotifier.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including Ask Shopping Toolbar published by Ask.com, Ask Shopping Toolbar from Ask.com and Ask Shopping Toolbar by Ask.com. The file is digitally signed by APN LLC which was issued by the VeriSign certificate authority (CA).

Details

File name:	tbnotifier.exe
Publisher:	APN
Product name:	Ask TBNotifier
Description:	Ask Toolbar Notifier
Typical file path:	C:\Program Files\askpartnernetwork\toolbar\updater\tbnotifier.exe
File version:	30.1.0.2671
Size:	1.32 MB (1,383,112 bytes)
Certificate
Issued to:	APN LLC
Authority (CA):	VeriSign
Effective date:	Monday, April 16, 2012
Expiration date:	Thursday, April 9, 2015
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Ask Shopping Toolbar

Ask.com

81% remove

Ask Shopping Toolbar is a web-browser add-on that can appear as an extra bar added to the browser's window and/or menu. It is often installed (sometimes without warning) during the installation of other software. Ask.com has entered into partnerships with some software security vendors, whereby they are paid to distribute the toolbar alongside their software. When you use the Toolbar to submit a query, the Toolbar forwards such query i...

Ask Toolbar

Ask.com

79% remove

The Ask Toolbar is a web-browser add-on that can appear as an extra bar added to the browser's window and/or menu. It is often installed (sometimes without warning) during the installation of other software. Ask.com has entered into partnerships with some software security vendors, whereby they are paid to distribute the toolbar alongside their software. When you use the Toolbar to submit a query, the Toolbar forwards such query inform...

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'ApnTBMon' → "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"

Network connections

[TCP] 79.140.95.144:80

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00034587%	0.028634%
Kernel CPU:	0.00012948%	0.013761%
User CPU:	0.00021639%	0.014873%
Kernel CPU time:	3,448 ms/min	100,923,805ms/min
Memory
Private memory:	7.29 MB	21.59 MB
Private (maximum):	14.85 MB
Private (minimum):	2.93 MB
Non-paged memory:	7.29 MB	21.59 MB
Virtual memory:	118.39 MB	140.96 MB
Virtual memory (peak):	125.48 MB	169.69 MB
Working set:	14.76 MB	18.61 MB
Working set (peak):	15.02 MB	37.95 MB
Page faults:	54,996/min	2,039/min
Resource allocations
Threads:	17	12
Handles:	331	600
GUI GDI count:	9	103
GUI GDI peak:	11	142
GUI USER count:	24	49
GUI USER peak:	26	71

Process properties

Integrety level:	Undefined
Platform:	64-bit
Command line:	"C:\Program Files\askpartnernetwork\toolbar\updater\tbnotifier.exe"
Owner:	User

Threads