Versions
(Note, Zugo Ltd publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
ToolbarUpdaterService.exe
By Zugo Ltd (Signed)
Warning 21 antivirus scanners has detected malware in various versions of ToolbarUpdaterService.exe.
Overview
There are 6 versions of ToolbarUpdaterService.exe in the wild, the latest version being . It is started as a Windows Service called 'Updater Service for PDFLite Toolbar' with the name 'SYSTEM\CurrentControlSet\Services\Updater Service for StartNow Toolbar'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 242.64 KB. The file is a digitally signed and issued to Zugo Ltd by The USERTRUST Network. During the process's lifecycle, the typical CPU resource utilization is about 0.0078% including both foreground and background operations, the average private memory consumption is about 8.14 MB. Addionally, typically read and write I/O disk operations is about 54.09 KB per minute for reads and 5.73 KB per minute for writes.
What is ToolbarUpdaterService.exe?
ToolbarUpdaterService.exe for the StartNow Toolbar is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.
About ToolbarUpdaterService.exe (from Zugo Ltd)
“StartNow toolbar is developed by Zugo and it gives you instant access to multimedia search, Facebook one click away, your local weather forecast and many other features that give you the best online e”
 Details
|
| File name: | ToolbarUpdaterService.exe |
| Typical file path: | C:\Program Files\startnow toolbar\toolbarupdaterservice.exe |
| Certificate |
| Issued to: | Zugo Ltd |
| Authority (CA): | The USERTRUST Network |
| Effective date: | Thursday, January 27, 2011 |
| Expiration date: | Sunday, January 27, 2013 |
| Windows Service |
| Service name: | SYSTEM\CurrentControlSet\Services\Updater Service for StartNow Toolbar |
| Display name: | Updater Service for PDFLite Toolbar |
Programs installed in
(Note, the programs listed below are for all versions of ToolbarUpdaterService.exe.)
“When you install PDFlite with default settings it may install a toolbar. PDFlite is free, and we include this toolbar to help support its development costs. With this toolbar you can search and click ...”
StartNow is a web browser toolbar that changes your homepage and redirects valid searches. StartNow toolbar is developed by Zugo and it gives you instant access to multimedia search, Facebook one clic...
Behaviors
(Note, the behaviors below are for all versions of ToolbarUpdaterService.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- Updater Service for PDFLite Toolbar
- 'Updater Service for StartNow Toolbar'
Malware detections
Based on 40+ industry antivirus scanners, 21 of them detected the following malware.
All file variations of ToolbarUpdaterService.exe
Distribution by Windows OS
| OS version | distribution |
| Windows XP Professional |
50.00% |
|
| Windows 7 Home Premium |
20.00% |
|
| Windows Vista Home Premium |
20.00% |
|
| Windows Vista Ultimate |
10.00% |
|
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
80.00% |
|
| Hewlett-Packard |
20.00% |
|
