Versions
(Note, Zugo Ltd publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
ToolbarUpdaterService.exe
By Zugo Ltd (Signed)
Warning 21 antivirus scanners has detected malware in various versions of ToolbarUpdaterService.exe.
Overview
ToolbarUpdaterService.exe has 6 known versions, the most recent one is . It is started as a Windows Service called 'Toolbar Updater Service'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 242.64 KB. It is an authenticode code-signed executable issued to Zugo Ltd by the certification authority The USERTRUST Network. During the process's lifecycle, the typical CPU resource utilization is about 0.0078% including both foreground and background operations, the average private memory consumption is about 8.14 MB. Addionally, typically read and write I/O disk operations is about 54.09 KB per minute for reads and 5.73 KB per minute for writes.
What is ToolbarUpdaterService.exe?
ToolbarUpdaterService.exe for the StartNow Toolbar is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.
About ToolbarUpdaterService.exe (from Zugo Ltd)
“StartNow toolbar is developed by Zugo and it gives you instant access to multimedia search, Facebook one click away, your local weather forecast and many other features that give you the best online e”
Details |
File name: | ToolbarUpdaterService.exe |
Typical file path: | C:\Program Files\startnow toolbar\toolbarupdaterservice.exe |
Certificate |
Issued to: | Zugo Ltd |
Authority (CA): | The USERTRUST Network |
Effective date: | Thursday, January 27, 2011 |
Expiration date: | Sunday, January 27, 2013 |
Windows Service |
Display name: | Toolbar Updater Service |
Programs installed in
(Note, the programs listed below are for all versions of ToolbarUpdaterService.exe.)
“When you install PDFlite with default settings it may install a toolbar. PDFlite is free, and we include this toolbar to help support its development costs. With this toolbar you can search and click ...”
StartNow is a web browser toolbar that changes your homepage and redirects valid searches. StartNow toolbar is developed by Zugo and it gives you instant access to multimedia search, Facebook one clic...
Behaviors
(Note, the behaviors below are for all versions of ToolbarUpdaterService.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
Malware detections
Based on 40+ industry antivirus scanners, 21 of them detected the following malware.
All file variations of ToolbarUpdaterService.exe
Distribution by Windows OS
OS version | distribution |
Windows XP Professional |
50.00% |
|
Windows 7 Home Premium |
20.00% |
|
Windows Vista Home Premium |
20.00% |
|
Windows Vista Ultimate |
10.00% |
|
Distribution by PC manufacturer
PC Manufacturer | distribution |
Dell |
80.00% |
|
Hewlett-Packard |
20.00% |
|