wbsvc.exe

Web Bar Service

Web Bar Media

The application wbsvc.exe by Web Bar Media has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a scheduled task under the Windows Task Scheduler named WebBarLaunchTask triggered to execute each time a user logs in. This file is typically installed with the program Web Bar 2.0.5273.16044 by Web Bar Media which is a potentially unwanted software program.
Remove wbsvc.exe - Powered by Reason Core Security
Publisher:
Web Bar Media  (signed and verified)

Product:
Web Bar Service

Version:
1.0.5273.16043

MD5:
d0a73709c9498c2e5e4e9ef5acc9f79c

SHA-1:
a29e39fb9d197efe020d55050e7ad7e5c2edc7f6

SHA-256:
b8256bc17450229c5eca99c8e550df0fb19728b4be42e209e4dea2b0a2b1dcac

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/6/2016 9:18:12 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.WebBarMedia.F
14.6.10.12

Remove wbsvc.exe - Powered by Reason Core Security
File size:
37 KB (37,872 bytes)

Product version:
1.0.5273.16043

Copyright:
Copyright © 2014

Original file name:
wbsvc.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\webbar\wbsvc.exe

Digital Signature
Signed by:

Authority:
DigiCert Inc

Valid from:
1/30/2014 4:00:00 PM

Valid to:
2/5/2015 4:00:00 AM

Subject:
CN=Web Bar Media, O=Web Bar Media, L=Victoria, S=British Columbia, C=CA

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
044224073D1C7BCC8763D980B58EA97E

File PE Metadata
Compilation timestamp:
6/9/2014 9:54:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:8EDDD3oXc0mSQuMP7VOVuQep50uQum5J1Pvn2bhH1MF:8EDD0pdC7VOVw0BJL1HaMF

Entry address:
0x3AAE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
4.8167

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
7 KB (7,168 bytes)

Scheduled Task
Task name:
WebBarLaunchTask

Trigger:
Logon (Runs on logon)

Action:
wbsvc.exe \l

Description:
This task is required by Web Bar.


The file wbsvc.exe has been discovered within the following program.

Web Bar 2.0.5273.16044  by Web Bar Media
WebBar adds a 'search bar' to the top of the Windows Shell which provides a user the ability to perform default searches. This in-turn provides affiliate search revenue to Web Bar. In addition the software may modify the default web browser's homepage and search provider.
www.getwebbar.com
68% remove it
 
Powered by Should I Remove It?

Remove wbsvc.exe - Powered by Reason Core Security