Should I block it?
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization
Additional versions
(Note, Hoolapp publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
updatetask.exe
By Hoolapp (Signed)
| MD5: | 82505ac4ae4839d83b76065c6f6f58c6 |
| SHA1: | bfc805e8143a309d6264936b5550b31b2b23b95a |
| SHA256: | 491e56fc62e891dd80a5321bb201577fd42bffb11627f44220ea10d6ca3f0107 |
Warning 8 antivirus scanners has detected malware.
Overview
updatetask.exe is malware that executes as a process with the local user's privileges. It is installed with a couple of know programs including Google Chrome published by Google Inc, Google Chrome from Google Inc and Google Chrome by Google Inc. The file is digitally signed by Hoolapp which was issued by the COMODO CA Limited certificate authority (CA).
Details
| File name: | updatetask.exe |
| Typical file path: | C:\users\user\appdata\roaming\hoolappforandroid\updateproc\updatetask.exe |
| Size: | 92.5 KB (94,720 bytes) |
| Certificate |
| Issued to: | Hoolapp |
| Authority (CA): | COMODO CA Limited |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
Google Chrome is a free web browser developed by Google that uses the WebKit layout engine. It is designed to be secure, fast, simple and stable. Chrome supports plug-ins with the Netscape Plugin Application Programming Interface (NPAPI). Chrome sends details about its usage to Google through both optional and non-optional user tracking mechanisms. The JavaScript virtual machine used by Chrome, the V8 JavaScript engine, has features suc...
Version Checker for Funmoods is an update task that keeps the Funmoods toolbar, a potentially unwanted ad-supported program up to date.
|
Mindspark Interactive Network |
|
Installs a Mindspark toolbar in your Web browser that collects and stores information about your web browsing habits and sends this information to Mindspark so they can suggest services or provide ads via the toolbar. FunMoods toolbar gives no or little satisfaction to its users, but a profound desire to get rid of FunMoods browser extension is in place. The toolbar is but a part of the problem as occasional but inevitable redirects in ...
“CoolNovo has all the functionalities that Google Chrome has. More, CoolNovo added some useful features such as Mouse gesture, Super drag, IE tab, etc. Meanwhile, CoolNovo is free with no function limitation and you can use CoolNovo to surf the internet in any case. Maple browser is a chrome kernel improved multi-label, multi-window green browser. Has a the rapid dual core, boss key, privacy features, ad filter more than 20 enhancements....”
Behaviors
Scheduled tasks
- The task 'Price Meter Updater' runs daily in the path '\Price Meter Updater'
- The task 'Speedial' runs daily in the path '\Speedial'
- The task 'PriceMeterUpdater' runs daily in the path '\PriceMeterUpdater'
- The task 'DigitalSite' runs daily in the path '\DigitalSite'
- The task 'MetaCrawler' runs daily in the path '\MetaCrawler'
- The task 'UpdaterEX' runs daily in the path '\UpdaterEX'
- The job 'MySearchDial' runs daily in the path '\MySearchDial'
- The task 'DealPly' runs daily in the path '\DealPly'
- The job 'At1' runs weekly in the path 'C:\WINDOWS\Tasks\At1.job'
- The job 'DSite' runs daily in the path '\DSite'
- The task 'Hoolapp For Android' runs daily in the path '\Hoolapp For Android'
- The job 'Funmoods' runs daily in the path '\Funmoods'
- Entry path '\Funmoods'
- Entry path '\Hoolapp For Android'
Malware detections
Based on 40+ industry antivirus scanners, 8 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| avast! |
8.0.1489.320 |
Win32:Downloader-SPD [PUP] |
| Baidu Antivirus |
3.5.1.41473 |
Trojan.Win32.Funmoods.42 |
| Bkav Security |
1.3.0.4613 |
W32.Cloddb7.Trojan.8520 |
| Dr.Web |
8.14.2.14 |
Trojan.Popupads.14 |
| ESET NOD32 |
8.9286 |
a variant of Win32/DealPly.H |
| Kingsoft |
2013.4.9.267 |
Win32.Troj.VBKrypt.bj.(kcloud) |
| Rising Antivirus |
25.0.0.11 |
PE:Trojan.Win32.Generic.148B87EC!344688620 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V0222 |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
26.76% |
|
| Windows 7 Ultimate |
18.31% |
|
| Microsoft Windows XP |
12.68% |
|
| Windows 8.1 |
8.45% |
|
| Windows 8 |
8.45% |
|
| Windows Vista Home Premium |
5.63% |
|
| Windows 8 Pro |
4.23% |
|
| Windows 7 Professional |
4.23% |
|
| Windows 7 Home Basic |
2.82% |
|
| Windows 8.1 Pro with Media Center |
1.41% |
|
| Windows 8.1 Enterprise |
1.41% |
|
| Windows 8.1 Single Language |
1.41% |
|
| Windows Developer Preview |
1.41% |
|
| Windows 8.1 Single Language Preview |
1.41% |
|
| Windows 8 Pro with Media Center |
1.41% |
|
Distribution by country
United States installs about 30.99% of updatetask.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
19.78% |
|
| Acer |
17.58% |
|
| Lenovo |
13.19% |
|
| Hewlett-Packard |
13.19% |
|
| ASUS |
10.99% |
|
| Toshiba |
8.79% |
|
| GIGABYTE |
4.40% |
|
| Samsung |
3.30% |
|
| American Megatrends |
3.30% |
|
| MSI |
2.20% |
|
| Sony |
2.20% |
|
| Sahara |
1.10% |
|
