Versions

18,1,7,644	1.87%
18,1,7,598	0.93%
18,1,0,443	0.93%
18,0,5,292	0.93%
18,0,5,292	0.93%
17,3,2,101	0.93%
17,3,0,49	0.93%
17, 1, 2, 1	0.93%
17, 1, 2, 1	1.87%
17, 1, 0, 27	0.93%
17, 0, 1, 12	10.28%
17, 0, 1, 12	9.35%
17, 0, 0, 12	2.80%
17, 0, 0, 12	7.48%
15, 5, 0, 2	3.74%
15, 5, 0, 2	3.74%
15, 4, 0, 5	2.80%
15, 4, 0, 5	1.87%
15, 3, 0, 11	12.15%
15, 3, 0, 11	6.54%
15, 2, 0, 5	15.89%
15, 2, 0, 5	10.28%
15, 1, 0, 2	1.87%

toolbarupdater.exe has 23 known versions, the most recent one is 18,1,7,644. It is started as a Windows Service called 'vToolbarUpdater18.1.0' with the name 'vToolbarUpdater17.1.0'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 1.55 MB. It is an authenticode code-signed executable issued to AVG Technologies by the certification authority VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0020% including both foreground and background operations, the average private memory consumption is about 4.28 MB with the maximum memory reaching around 8.36 MB. Addionally, typically read and write I/O disk operations is about 85 Bytes per minute for reads and 358 Bytes per minute for writes.