Should I block it?
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization
Additional versions
(Note, Zugo Ltd publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
ToolbarUpdaterService.exe
By Zugo Ltd (Signed)
| MD5: | 7ccf424450af71461ca5aca14fb45b72 |
| SHA1: | f40d32cc5fb2cd3466e3d28becdf178386092048 |
| SHA256: | faba02d8276bb39b7424601005583318eb697a49dde79b26f795e89dffda3a23 |
Warning 4 antivirus scanners has detected malware.
What is ToolbarUpdaterService.exe?
ToolbarUpdaterService.exe for the StartNow Toolbar is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.
About ToolbarUpdaterService.exe (from Zugo Ltd)
“StartNow toolbar is developed by Zugo and it gives you instant access to multimedia search, Facebook one click away, your local weather forecast and many other features that give you the best online e”
Details
| File name: | ToolbarUpdaterService.exe |
| Typical file path: | C:\Program Files\startnow toolbar\toolbarupdaterservice.exe |
| Size: | 261.22 KB (267,488 bytes) |
| Certificate |
| Issued to: | Zugo Ltd |
| Authority (CA): | The USERTRUST Network |
| Effective date: | Thursday, January 27, 2011 |
| Expiration date: | Sunday, January 27, 2013 |
| Digital DNA |
| Entropy: | 6.259639 |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
StartNow is a web browser toolbar that changes your homepage and redirects valid searches. StartNow toolbar is developed by Zugo and it gives you instant access to multimedia search, Facebook one click away, your local weather forecast and many other features that give you the best online experience. It is simple, light weight and blends perfectly with your browser to give you instant access to your favourite sites and information.
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- Updater Service for PDFLite Toolbar
- 'Updater Service for StartNow Toolbar'
Malware detections
Based on 40+ industry antivirus scanners, 4 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Emsisoft Anti-Malware |
None |
Riskware.Win32.Toolbar.Zugo.AMN (A) |
| eSafe |
7.0.17.0 |
Win32.Trojan |
| ESET NOD32 |
7.7992 |
a variant of Win32/Toolbar.Zugo |
| VIPRE Antivirus |
15488 |
Zugo Ltd (v) (not malicious) |
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.01558941% | |
| Kernel CPU: | 0.01082100% | |
| User CPU: | 0.00476840% | |
| Kernel CPU time: | 1,796 ms/min | |
| User CPU time: | 10,135 ms/min | |
| Memory |
| Private memory: | 16.01 MB | |
| Private (maximum): | 13.43 MB | |
| Private (minimum): | 13.24 MB | |
| Non-paged memory: | 16.01 MB | |
| Virtual memory: | 61.41 MB | |
| Virtual memory (peak): | 62.08 MB | |
| Working set: | 13.44 MB | |
| Working set (peak): | 20.68 MB | |
| Page faults: | 12,892/min | |
| I/O |
| I/O read transfer: | 85.37 KB/sec | |
| I/O read operations: | 117/sec | |
| I/O write transfer: | 90 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 4.77 KB/sec | |
| I/O other operations: | 301/sec | |
| Resource allocations |
| Threads: | 5 | |
| Handles: | 175 | |
| GUI GDI count: | 4 | |
| GUI USER count: | 4 | |
Process properties
| Platform: | 32-bit |
| Command line: | "C:\Program Files\startnow toolbar\toolbarupdaterservice.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | SYSTEM\CurrentControlSet\Services\Updater Service for StartNow Toolbar |
| Display name: | Updater Service for PDFLite Toolbar |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Distribution by Windows OS
| OS version | distribution |
| Windows XP Professional |
50.00% |
|
| Windows 7 Home Premium |
20.00% |
|
| Windows Vista Home Premium |
20.00% |
|
| Windows Vista Ultimate |
10.00% |
|
Distribution by country
United States installs about 100.00% of ToolbarUpdaterService.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
80.00% |
|
| Hewlett-Packard |
20.00% |
|
