Should I block it?
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization
Additional versions
(Note, Zugo Ltd publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
ToolbarUpdaterService.exe
By Zugo Ltd (Signed)
| MD5: | 5975d0542afc97991cea88caac8a3e81 |
| SHA1: | d46f08a3ea8f4ce07eb207351829dd1050935f36 |
| SHA256: | f870cd3199cc24ccace5070a024d3107ef610caad45edff41358287a768b5b8d |
Warning 7 antivirus scanners has detected malware.
What is ToolbarUpdaterService.exe?
ToolbarUpdaterService.exe for the StartNow Toolbar is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.
About ToolbarUpdaterService.exe (from Zugo Ltd)
“StartNow toolbar is developed by Zugo and it gives you instant access to multimedia search, Facebook one click away, your local weather forecast and many other features that give you the best online e”
Details
| File name: | ToolbarUpdaterService.exe |
| Typical file path: | C:\Program Files\startnow toolbar\toolbarupdaterservice.exe |
| Size: | 239.22 KB (244,960 bytes) |
| Certificate |
| Issued to: | Zugo Ltd |
| Authority (CA): | The USERTRUST Network |
| Effective date: | Thursday, January 27, 2011 |
| Expiration date: | Sunday, January 27, 2013 |
| Digital DNA |
| Entropy: | 6.259639 |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
“When you install PDFlite with default settings it may install a toolbar. PDFlite is free, and we include this toolbar to help support its development costs. With this toolbar you can search and click on the popular links but if you would like to remove this go to Add or Remove Programs. The reader is a powerful Windows PDF viewer that opens PDFs, XPS, DjVu, CBZ and CBR. It is small and fast, and even has a browser plugin that is light a...”
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- Updater Service for PDFLite Toolbar
- 'Updater Service for StartNow Toolbar'
Malware detections
Based on 40+ industry antivirus scanners, 7 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Antiy Labs AVL |
2.0.3.7 |
Trojan/Win32.Agent.gen |
| Comodo Internet Security |
16825 |
UnclassifiedMalware |
| Dr.Web |
8.13.9.29 |
Adware.Zugo.71 |
| ESET NOD32 |
7.8728 |
Win32/Toolbar.Zugo |
| Malwarebytes |
1.75.0.1 |
PUP.Optional.SweetPacks.A |
| nProtect |
2013-08-26.03 |
Trojan/W32.Monder.244960 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.R4FH1B9 |
Distribution by Windows OS
| OS version | distribution |
| Windows XP Professional |
50.00% |
|
| Windows 7 Home Premium |
20.00% |
|
| Windows Vista Home Premium |
20.00% |
|
| Windows Vista Ultimate |
10.00% |
|
Distribution by country
United States installs about 100.00% of ToolbarUpdaterService.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
80.00% |
|
| Hewlett-Packard |
20.00% |
|
