Should I block it?
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization
Relationships
toolbarupdate.exe
Updater by Zugo Ltd (Signed)
| Version: | 1.0 |
| MD5: | 6aa527060058f221ab9207d270616047 |
| SHA1: | 748a10090058af0ccc6df8ed50359aea8a04893a |
| SHA256: | 25b92c56cc57e16c98cab2ee3d102b534b287e019ab37e2dafe50e602a97c90f |
Warning 6 antivirus scanners has detected malware.
What is toolbarupdate.exe?
Updater is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.
About toolbarupdate.exe (from Zugo Ltd)
“StartNow toolbar is developed by Zugo and it gives you instant access to multimedia search, Facebook one click away, your local weather forecast and many other features that give you the best online e”
Overview
toolbarupdate.exe will ad a run once registry key upon installation for all user profiles of the PC that will cause the file to be executed the first time any user logs in. The file is digitally signed by Zugo Ltd.
Details
| File name: | toolbarupdate.exe |
| Product name: | Updater |
| Typical file path: | C:\windows\temp\toolbarupdate.exe |
| File version: | 1.0 |
| Size: | 1.26 MB (1,321,856 bytes) |
| Certificate |
| Issued to: | Zugo Ltd |
| Digital DNA |
| File packed: | Yes |
| .NET CLR: | No |
More details
Behaviors
Startup files (all users) run once
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'
- 'ZTBUpdater5_871' → "C:\Windows\TEMP\ToolbarUpdate.exe" -REBOOT
Malware detections
Based on 40+ industry antivirus scanners, 6 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Comodo Internet Security |
15010 |
UnclassifiedMalware |
| Dr.Web |
7.0.4.09250 |
Adware.Zugo.71 |
| eSafe |
7.0.17.0 |
Win32.Trojan |
| ESET NOD32 |
7.7921 |
a variant of Win32/Toolbar.Zugo |
| eScan by MicroWorld |
12.0.250.0 |
Win32/Toolbar.Zugo (ES) |
| VIPRE Antivirus |
15164 |
Zugo (not malicious) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
100.00% |
|
Distribution by country
United States installs about 100.00% of Updater.
