Should I block it?
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization
Additional versions
(Note, Bit Cocktail Ltd. publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
extensionupdaterservice.exe
By Bit Cocktail Ltd. (Signed)
| MD5: | d75398987c968dcbabc411e08029e387 |
| SHA1: | a02bc363b2550ba9d336a7587b6b83c8f7906193 |
| SHA256: | 225497d4b820f5a024d28b962355eb164e957517f6ccfa7426b8936acc26191e |
Warning 6 antivirus scanners has detected malware.
What is extensionupdaterservice.exe?
Plazy Updater is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found.
Overview
extensionupdaterservice.exe is malware that runs as a service under the name Web Assistant (Updater By SweetPacks) within the local user context. It is installed with a couple of know programs including Web Assistant 2.0.0.478 published by Perion Network Ltd. and Web Assistant 2.0.0.573 published by Perion Network Ltd.. The file is digitally signed by Bit Cocktail Ltd. which was issued by the Thawte certificate authority (CA).
Details
| File name: | extensionupdaterservice.exe |
| Typical file path: | C:\Program Files\plazy\extensionupdaterservice.exe |
| Size: | 184.34 KB (188,760 bytes) |
| Build date: | 1/29/2013 7:28 AM |
| Certificate |
| Issued to: | Bit Cocktail Ltd. |
| Authority (CA): | Thawte |
| Expiration date: | Thursday, January 16, 2014 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
Web Assistant installs into the IE and Firefox web browsers and provides advertisier supported searchs that changes and redircts default search results as well as DNS errors. Web Assistant becomes the browser's default search provider which changes all search requests as well as tracks your Internet surfing behavior in order display targeted advertising.
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- Web Assistant
- 'Updater By SweetPacks'
- 'Web Assistant Updater'
Malware detections
Based on 40+ industry antivirus scanners, 6 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Antiy Labs AVL |
2.0.3.7 |
Trojan/Win32.Agent |
| ESET NOD32 |
7.8752 |
a variant of Win32/Toolbar.BitCocktail.B |
| Malwarebytes |
1.75.0.1 |
PUP.Optional.SweetPacks.A |
| Sophos |
4.91.0 |
BitCocktail |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V0315 |
| ViRobot |
2011.4.7.4223 |
Trojan.Win32.A.Agent.188760 |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
26.67% |
|
| Windows Vista Home Premium |
23.33% |
|
| Windows 8 |
16.67% |
|
| Windows 7 Ultimate N |
13.33% |
|
| Microsoft Windows XP |
6.67% |
|
| Windows 8 Pro |
3.33% |
|
| Windows 7 Ultimate |
3.33% |
|
| Windows 7 Starter |
3.33% |
|
| Windows 7 Professional |
3.33% |
|
Distribution by country
United States installs about 73.33% of extensionupdaterservice.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Toshiba |
51.85% |
|
| Hewlett-Packard |
25.93% |
|
| Gateway |
7.41% |
|
| Sony |
7.41% |
|
| ASUS |
7.41% |
|
