Should I block it?

60%

60% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

18,1,7,644	1.87%
18,1,7,598	0.93%
18,1,0,443	0.93%
18,0,5,292	0.93%
18,0,5,292	0.93%
17,3,2,101	0.93%
17,3,0,49	0.93%
17, 1, 2, 1	0.93%
17, 1, 2, 1	1.87%
17, 1, 0, 27	0.93%
17, 0, 1, 12	10.28%
17, 0, 1, 12	9.35%
17, 0, 0, 12	2.80%
17, 0, 0, 12	7.48%
15, 5, 0, 2	3.74%
15, 5, 0, 2	3.74%
15, 4, 0, 5	2.80%
15, 4, 0, 5	1.87%
15, 3, 0, 11	12.15%
15, 3, 0, 11	6.54%
15, 2, 0, 5	15.89%
15, 2, 0, 5	10.28%
15, 1, 0, 2	1.87%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Child process

loggingserver.exe (loggings Application by AVG Technologies)

PE file structure

Show functions

Import table

advapi32.dll

ConvertStringSidToSidW, RegisterServiceCtrlHandlerW, SetServiceStatus, RegOpenKeyExW, RegNotifyChangeKeyValue, RegCloseKey, OpenProcessToken, RegCreateKeyExW, RegQueryValueExW, CryptDecrypt, CryptDestroyKey, CryptAcquireContextA, CryptDeriveKey, RegSetKeySecurity, AddAccessAllowedAce, InitializeAcl, GetNamedSecurityInfoW, SetNamedSecurityInfoW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, CryptHashData, CryptDestroyHash, CryptCreateHash, CryptReleaseContext, CryptAcquireContextW, CryptGetHashParam, GetLengthSid, GetTokenInformation, RegSetValueExW, RegLoadKeyW, AdjustTokenPrivileges, RegEnumKeyExW, RegFlushKey, RegDeleteValueW, LookupAccountSidW, LookupPrivilegeValueW, RegDeleteKeyW, StartServiceCtrlDispatcherW, RegQueryInfoKeyW, RegUnLoadKeyW, RegEnumValueW

crypt32.dll

CryptMsgGetParam, CertCloseStore, CertFindCertificateInStore, CertFreeCertificateContext, CertGetNameStringW, CryptQueryObject, CryptMsgClose, CryptProtectData

kernel32.dll

DllMain

ole32.dll

CoCreateInstance, StringFromGUID2, CoCreateGuid, CoUninitialize, CoInitialize

shell32.dll

SHGetFolderPathW, SHGetFolderPathA, SHGetSpecialFolderPathW

shlwapi.dll

UrlUnescapeW, PathFileExistsW, PathIsDirectoryW

user32.dll

wsprintfW, PostMessageW, EnumWindows, GetClassNameW, IsWindow, GetSystemMetrics

version.dll

VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW

wininet.dll

HttpAddRequestHeadersW, HttpQueryInfoW, HttpOpenRequestW, InternetOpenW, InternetReadFile, InternetConnectW, HttpSendRequestW, InternetSetOptionW, InternetCloseHandle

wintrust.dll

WinVerifyTrust

toolbarupdater.exe

ToolbarU Application by AVG Technologies (Signed)

Remove toolbarupdater.exe

Version:	17, 0, 0, 12
MD5:	87df7e6f9c07843dba84f5f3859dd44c
SHA1:	5ea0e37cb14289f45c461900a5450879bbbad44d
SHA256:	29959c0f4b747f126a1eb27ff26fc7585f57b1ca06aeb2508b9d38fcf2c61ae3

Overview

toolbarupdater.exe runs as a service under the name vToolbarUpdater18.1.0 (vToolbarUpdater17.1.0) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by AVG Technologies which was issued by the VeriSign certificate authority (CA).

Details

File name:	toolbarupdater.exe
Publisher:	AVG Secure Search
Product name:	ToolbarU Application
Typical file path:	C:\Program Files\common files\avg secure search\vtoolbarupdater\15.2.0\toolbarupdater.exe
Original name:	ToolbarU.exe
File version:	17, 0, 0, 12
Size:	1.65 MB (1,734,680 bytes)
Build date:	8/27/2013 2:48 PM
Certificate
Issued to:	AVG Technologies
Authority (CA):	VeriSign
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

vToolbarUpdater18.1.0
'vToolbarUpdater17.1.0'
'vToolbarUpdater17.0.12'
'vToolbarUpdater15.3.0'
'vToolbarUpdater15.2.0'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00075520%	0.028634%
Kernel CPU:	0.00065243%	0.013761%
User CPU:	0.00010277%	0.014873%
Kernel CPU time:	1,642,800 ms/min	100,923,805ms/min
CPU cycles:	52,114/sec	17,470,203/sec
Memory
Private memory:	4.27 MB	21.59 MB
Private (maximum):	7.24 MB
Private (minimum):	2.22 MB
Non-paged memory:	4.27 MB	21.59 MB
Virtual memory:	65.18 MB	140.96 MB
Virtual memory (peak):	76.67 MB	169.69 MB
Working set:	5.2 MB	18.61 MB
Working set (peak):	8.11 MB	37.95 MB
Page faults:	15,558/min	2,039/min
I/O
I/O read transfer:	186 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	653 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	312 Bytes/sec	448.09 KB/min
I/O other operations:	17/sec	1,671/min
Resource allocations
Threads:	9	12
Handles:	238	600

Process properties

Integrety level:	System
Platform:	32-bit
Command line:	"C:\Program Files\common files\avg secure search\vtoolbarupdater\17.0.12\toolbarupdater.exe"
Owner:	SYSTEM
Windows Service
Service name:	vToolbarUpdater17.1.0
Display name:	vToolbarUpdater18.1.0
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

sechost.dll
Total CPU:	0.00018298%	0.272967%
Kernel CPU:	0.00015325%	0.107585%
User CPU:	0.00002973%	0.165382%
CPU cycles:	4,565/sec	5,741,424/sec
Memory:	100 KB	1.16 MB
ntdll.dll
Total CPU:	0.00015296%
Kernel CPU:	0.00014531%
User CPU:	0.00000765%
CPU cycles:	4,155/sec
Memory:	1.23 MB
ToolbarUpdater.exe (main module)
Total CPU:	0.00001144%
Kernel CPU:	0.00000915%
User CPU:	0.00000229%
CPU cycles:	476/sec
Memory:	1.67 MB

Distribution by Windows OS

OS version	distribution
Windows 7 Home Premium	33.96%
Windows 7 Ultimate	27.36%
Microsoft Windows XP	11.32%
Windows 7 Professional	7.55%
Windows 8	6.60%
Windows Vista Home Premium	4.72%
Windows 8 Pro with Media Center	1.89%
Windows 8 Single Language	1.89%
Windows 8.1 Pro with Media Center	0.94%
Windows 7 Home Basic	0.94%
Windows Vista Ultimate	0.94%
Windows 8 Pro	0.94%
Windows Vista Home Basic	0.94%

Distribution by country

United States installs about 39.42% of ToolbarU Application.

Distribution by PC manufacturer

PC Manufacturer	distribution
Acer	23.62%
Hewlett-Packard	14.96%
ASUS	12.60%
Toshiba	12.60%
Dell	11.02%
Sony	6.30%
Lenovo	4.72%
Gateway	3.15%
Intel	3.15%
GIGABYTE	2.36%
Compaq	1.57%
American Megatrends	1.57%
Samsung	1.57%
Alienware	0.79%

Remove Adware and Spyware Programs, FREE Download!