UpdaterEX

UpdaterEX

Known Malware

by installCore

What is UpdaterEX?

UpdaterEX is software application developed by installCore. It is most commonly found on computers running Windows 7 with nearly 65.85% of installations running this operating system. UpdaterEX's installer is typically 39.00 MB in size and installs around 9 files.

UpdaterEX is most popular in the United States with 47.38% of installations residing in this country.

UpdaterEX adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About UpdaterEX?

This software functions as a background updater and is commonly included in software download bundles distributed through the Install Core mechanism. It has the capability to connect to info.updaterex.com for additional downloads and updates. While it may not be desired by all users, it is a component that helps keep software current and functioning effectively.

Multiple virus scanners have detected malware in UpdaterEX.

Updater.dll (MD5: 7269d6f935bc2c0b635655633567273a) has been flagged by 5 scanners:
Scanner Software Result
AVware Gamevance LLC (v)
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Qihoo-360 Win32/Trojan.Adware.37e
Tencent Win32.Trojan.Falsesign.Afrl
VIPRE Antivirus GameVance (fs)
UpdateTask.exe (MD5: 5f6f4ee3faa18ef7e386864cedf6dc06) has been flagged by 12 scanners:
Scanner Software Result
AhnLab-V3 PUP/Win32.Adload
Baidu-International Adware.Win32.DealPly.45
Dr.Web Trojan.Packed.28227
ESET-NOD32 a variant of Win32/DealPly.S
NANO AntiVirus Riskware.Win32.Shopper.cwzphd
Trend Micro ADW_DEALPLY
TrendMicro-HouseCall ADW_DEALPLY
AVware Gamevance LLC (v)
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Qihoo-360 Win32/Trojan.Adware.37e
Tencent Win32.Trojan.Falsesign.Afrl
VIPRE Antivirus GameVance (fs)
PlaytopusPE.dll (MD5: d136389d18c8c07d532ee643d4c9d77d) has been flagged by 2 scanners:
Scanner Software Result
AVware GameVance (fs)
VIPRE Antivirus GameVance (fs)

Software Behaviors

Services:
  • atcliun.exe runs as a service named 'McAfee SiteAdvisor Service' (McAfee SiteAdvisor Service).
Scheduled tasks:
  • atcliun.exe is scheduled as a task named 'Taplika' (runs daily at 6:48 PM).
  • UpdateTask.exe is scheduled as a task named 'At5' (runs daily at 21:55).
  • Updater.dll is scheduled as a task named 'Playtopus Updater' (runs daily at 5:30 PM).

Software Details

URL:
https://www.installcore.com
Support:
Installation path:
C:\users\user\appdata\Roaming\UpdaterEX\updateproc
Uninstaller:
C:\users\user\appdata\Roaming\UPDATE~1\UpdateProc\UpdateTask.exe /Uninstall
Size:
39.00 MB
Language:
English

UpdaterEX Executable Details

Primary executable:
UpdateTask.exe
Name:
UpdaterEX
Path:
C:\users\user\appdata\Roaming\UpdaterEX\updateproc\UpdateTask.exe
MD5:
5f6f4ee3faa18ef7e386864cedf6dc06
SHA-1:
SHA-256:
Files installed by UpdaterEX
File Type Filename MD5
DLL
7269d6f935bc2c0b635655633567273a
DLL
e37381c26ea8461a99dd05b4caa4a23e
EXE
5f6f4ee3faa18ef7e386864cedf6dc06
EXE
11f4320d6275aa5a1e09c4826cb89a9c
DLL
96698aeec2e9f430e617c18b6cfce71d
DLL
c436ca6e28e07fd1b0ccfbf3a11f1c57
DLL
20cbfc5e9d00bed5de7ac5852f3a9104
DLL
d136389d18c8c07d532ee643d4c9d77d
DLL
ff91fc28bc0c3ec42c645cf08903fe4d