Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

VersionsAdditional versions

1.8.11.0 4.00%
1.8.3.0 40.00%
1.8.0.0 4.00%
1.6.9.0 44.00%
1.6.3.0 4.00%
1.4.15.0 4.00%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegEnumKeyExA, GetTokenInformation, RegEnumValueA, ConvertSidToStringSidA, RegQueryValueExA, RegQueryInfoKeyA, RegQueryInfoKeyW, RegDeleteValueA, RegGetKeySecurity, RegSetValueExA, RegCloseKey, RegDeleteKeyA, RegCreateKeyExA, RegOpenKeyExA, RegOpenKeyA, RegSetKeySecurity, OpenProcessToken
gdi32.dll
SelectObject, GetStockObject, GetObjectA, CreateSolidBrush, GetDeviceCaps, BitBlt, CreateCompatibleDC, CreateCompatibleBitmap, DeleteDC, DeleteObject
kernel32.dll
GetTickCount, RaiseException, EnterCriticalSection, LeaveCriticalSection, lstrcmpiA, IsDBCSLeadByte, Sleep, CreateThread, CreateEventA, GetModuleHandleW, SetEvent, ExitProcess, FreeLibrary, FindResourceA, LoadLibraryExA, GetCommandLineA, FlushInstructionCache, GetCurrentProcess, SetLastError, LoadLibraryA, LocalAlloc, LocalFree, SetFilePointer, CreateDirectoryA, GetTempPathA, MoveFileExA, GetTempFileNameA, InitializeCriticalSection, GlobalUnlock, GlobalLock, GlobalAlloc, lstrcmpA, MulDiv, ReleaseMutex, ResetEvent, CreateMutexA, GetVersionExA, GetEnvironmentVariableA, SetEnvironmentVariableA, WideCharToMultiByte, CloseHandle, CompareStringW, CreateFileW, GetModuleHandleExA, FlushFileBuffers, SetStdHandle, LoadLibraryW, LCMapStringW, GetConsoleMode, GetConsoleCP, GetStringTypeW, GetCurrentProcessId, QueryPerformanceCounter, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, GetModuleFileNameW, GetStdHandle, GetTimeZoneInformation, TerminateProcess, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, HeapCreate, GetSystemTimeAsFileTime, GetStartupInfoW, HeapSetInformation, VirtualQuery, GetSystemInfo, VirtualProtect, GetDateFormatA, GetTimeFormatA, RtlUnwind, EncodePointer, DecodePointer, InterlockedPopEntrySList, VirtualAlloc, VirtualFree, IsProcessorFeaturePresent, InterlockedPushEntrySList, InterlockedCompareExchange, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, GetModuleFileNameA, GetCurrentThreadId, lstrlenA, InterlockedIncrement, InitializeCriticalSectionAndSpinCount, WaitForSingleObject, GetFileTime, InterlockedDecrement, lstrlenW, MultiByteToWideChar, FileTimeToLocalFileTime, GetModuleHandleA, GetProcAddress, CreateFileA, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, GetLastError, FileTimeToSystemTime, WriteConsoleW, HeapDestroy, WriteFile, OutputDebugStringA
ole32.dll
CoRegisterClassObject, OleInitialize, OleRun, CoCreateInstance, CLSIDFromProgID, CLSIDFromString, CoTaskMemFree, StringFromCLSID, CoTaskMemAlloc, CoTaskMemRealloc, CoInitialize, CoUninitialize, CoRevokeClassObject, OleUninitialize, CoCreateGuid, StringFromGUID2, CoAddRefServerProcess, CoReleaseServerProcess, CoInitializeEx, CreateStreamOnHGlobal, OleLockRunning, CoGetClassObject
sensapi.dll
IsNetworkAlive
shell32.dll
SHGetSpecialFolderPathA, SHGetFileInfoA, Shell_NotifyIconA, SHGetSpecialFolderPathW, ShellExecuteExA, ShellExecuteA
shlwapi.dll
PathAppendA, PathRenameExtensionA, PathFindFileNameA, PathFindExtensionA, StrStrW, SHSetValueA, PathIsURLW, PathRemoveFileSpecA, PathAddBackslashA, StrToIntW, SHGetValueA
user32.dll
CharUpperA, GetMessageA, UnhookWindowsHookEx, CallNextHookEx, GetDlgItem, SetForegroundWindow, SetFocus, SetWindowsHookExA, SetTimer, IsWindow, SendMessageA, UnregisterClassA, KillTimer, SendInput, ShowWindow, CharNextA, LoadIconA, TranslateMessage, GetParent, MsgWaitForMultipleObjects, PeekMessageA, GetWindowTextLengthA, GetWindowTextA, CreateAcceleratorTableA, DestroyAcceleratorTable, GetDesktopWindow, GetFocus, GetWindow, BeginPaint, EndPaint, FillRect, ReleaseCapture, GetClassNameA, PostThreadMessageA, IsChild, SetCapture, RedrawWindow, InvalidateRgn, InvalidateRect, ReleaseDC, GetDC, ScreenToClient, ClientToScreen, GetClientRect, MoveWindow, GetSysColor, RegisterWindowMessageA, PostQuitMessage, CreateWindowExA, RegisterClassExA, CallWindowProcA, GetWindowLongA, DefWindowProcA, LoadCursorA, GetClassInfoExA, SetWindowLongA, SetWindowTextA, DestroyWindow, SetWindowPos, CharNextW, DispatchMessageA

babylontoolbarsrv.exe

Babylon Toolbar by Babylon Ltd. (Signed)

Remove babylontoolbarsrv.exe
Version:   1.8.3.0
MD5:   daa8044dbeb1ed22add5b849b325c41b
SHA1:   25f2ddba03b908062afb4ef93dc057f214263a58
SHA256:   47c8f3a5ac427f18c545cda027257c38bdaeaed2cbd49518838feef6592e7d52
Warning 3 antivirus scanners has detected malware.

What is babylontoolbarsrv.exe?

Babylon Toolbar is a web browser add-on that allows you to get quick translations and definitions directly from your web browser. Babylon Toolbar and web search are the core features of this program. Babylon Toolbar toolbar comes bundled with other software, usually shareware. or can be downloaded from the official Babylon website. It also comes bundled with CNET's software downloader and there are several other popular download sites that distribute this toolbar through bundled installations.

About babylontoolbarsrv.exe (from Babylon Ltd.)

Babylon is the world's leading provider of language solutions, such as online and offline dictionary and translation software in over 75 languages in one simple click and is being used by millions of

DetailsDetails

File name:babylontoolbarsrv.exe
Publisher:Babylon Ltd.
Product name:Babylon Toolbar
Typical file path:C:\Program Files\babylontoolbar\babylontoolbar\1.6.4.6\babylontoolbarsrv.exe
File version:1.8.3.0
Size:366 KB (374,784 bytes)
Certificate
Issued to:Babylon Ltd.
Authority (CA):Thawte
Expiration date:Wednesday, September 3, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Babylon Ltd
  67% remove
Babylon Toolbar from Babylon Ltd is a web browser plugin that allows you to get language translations and definitions through an installed web browser toolbar. Typically, the Babylon Toolbar comes bundled with other software, usually freeware and shareware. Before installing the toolbar, users have to agree to end user software agreement and accept all the changes that will be made during the installation. This web browser toolbar can c...
Babylon Ltd
  82% remove
Babylon Toolbar from Babylon Ltd is a web browser plugin that allows you to get language translations and definitions through an installed web browser toolbar. Typically, the Babylon Toolbar comes bundled with other software, usually freeware and shareware. Before installing the toolbar, users have to agree to end user software agreement and accept all the changes that will be made during the installation. This web browser toolbar can c...

MalwareMalware detections

Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
Antivirus engineEngine versionDetection
ESET NOD32 7.7780 probably a variant of Win32/Toolbar.Babylon
SUPERAntiSpyware 5.6.0.1008 PUP.BabylonToolbar
Trend Micro HouseCall 9.700.0.1001 TROJ_GEN.F47V1017

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.01341722%
0.028634%
Kernel CPU:0.00940902%
0.013761%
User CPU:0.00400820%
0.014873%
Kernel CPU time:2,373 ms/min
100,923,805ms/min
Context switches:13/sec
284/sec
Memory
Private memory:1.54 MB
21.59 MB
Private (maximum):2.8 MB
Private (minimum):1.49 MB
Non-paged memory:1.54 MB
21.59 MB
Virtual memory:58.36 MB
140.96 MB
Virtual memory (peak):61.56 MB
169.69 MB
Working set:1.64 MB
18.61 MB
Working set (peak):5.53 MB
37.95 MB
Page faults:3,732/min
2,039/min
Resource allocations
Threads:4
12
Handles:118
600
GUI GDI count:9
103
GUI GDI peak:9
142
GUI USER count:13
49
GUI USER peak:14
71

BehaviorsProcess properties

Integrety level:Medium
Platform:32-bit
Command line:"C:\Program Files\babylontoolbar\babylontoolbar\1.8.3.8\babylontoolbarsrv.exe" -embedding
Owner:User
Parent process:svchost.exe (Host Process for Windows Services by Microsoft Corporation)

ResourcesThreads

Averages
 
BabylonToolbarsrv.exe (main module)
Total CPU:0.06899496%
0.272967%
Kernel CPU:0.06513150%
0.107585%
User CPU:0.00386346%
0.165382%
CPU cycles:2,443,622/sec
5,741,424/sec
Context switches:4/sec
79/sec
Memory:388 KB
1.16 MB
ntdll.dll
Total CPU:0.00086043%
Kernel CPU:0.00000000%
User CPU:0.00086043%
CPU cycles:3,071/sec
Memory:1.23 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate N 50.00%
Microsoft Windows XP 50.00%

Distribution by countryDistribution by country

Netherlands installs about 100.00% of Babylon Toolbar.
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE