MailRuUpdater.exe

MailRuUpdater by LLC Mail.Ru (Signed)

Remove MailRuUpdater.exe
Warning 7 antivirus scanners has detected malware in various versions of MailRuUpdater.exe.

Overview

mailruupdater.exe has 5 known versions, the most recent one is 1, 0, 0, 123. mailruupdater.exe is run as a standard windows process with the logged in user's account privileges. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 1.5 MB. It is an authenticode code-signed executable issued to LLC Mail.Ru by the certification authority Thawte. During the process's lifecycle, the typical CPU resource utilization is about 0.0010% including both foreground and background operations, the average private memory consumption is about 2.72 MB with the maximum memory reaching around 7.19 MB. Addionally, typically read and write I/O disk operations is about 6 Bytes per minute for reads and 0 Bytes per minute for writes.

What is mailruupdater.exe?

Mail.Ru updater is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks for software udpates and automatically downloads and installs them if found. The updater will check for updates remotely and install them based on an internal schedule.

DetailsDetails

File name:mailruupdater.exe
Publisher:Mail.Ru
Product name:MailRuUpdater
Description:Mail.Ru updater
Typical file path:C:\users\user\appdata\local\mail.ru\mailruupdater.exe
Certificate
Issued to:LLC Mail.Ru
Authority (CA):Thawte
Effective date:Monday, September 12, 2011
Expiration date:Wednesday, July 2, 2014

BehaviorsBehaviors

(Note, the behaviors below are for all versions of mailruupdater.exe, select a unique version for details.)
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'MailRuUpdater' → C:\users\user\appdata\Local\Mail.Ru\MailRuUpdater.exe

MalwareMalware detections

Based on 40+ industry antivirus scanners, 7 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
avast! 8.0.1489.320 Win32:Downloader-TPW [PUP] 1, 0, 0, 91
AVG 2014.0.3629 Generic30.COUX 1, 0, 0, 40
Kingsoft 2013.4.9.267 Win32.HeurC.KVM019.a.(kcloud) 1, 0, 0, 98
Rising Antivirus 24.57.03.04 Suspicious 1, 0, 0, 40
Rising Antivirus 24.68.01.04 Suspicious 1, 0, 0, 91
Rising Antivirus 24.83.01.04 Suspicious 1, 0, 0, 98
Rising Antivirus 24.83.04.04 Suspicious 1, 0, 0, 123

VersionsAll file variations of mailruupdater.exe

MD5SHA-1File size
17761493fd7dcf452bb050ec51df5648 070a5dee83804063a13adfb40ec7f8f991db1dbc 1.53 MB
9ee84638b3f39beb7e40ab8f47ce5b90 60dab22de924aa1c074c1b19ee770834035b3243 1.57 MB
9538eb8399520c837df7725c62d22b6a abea7476131dd91617f6c5c2d0c0fa7650559ce8 1.53 MB
3866063d9c790c87b19bf6a6df319c7f 25cd922bcb76e094f5d9a1fc532a85e169a65449 1.48 MB
4060317e55f2d948b08c8d70c9561f19 3bdf5c100be8f0ab08f146a6b3aede61d102b07c 1.39 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 40.00%
Microsoft Windows XP 33.33%
Windows 7 Home Basic 20.00%
Windows 7 Home Premium 6.67%

Distribution by countryDistribution by country

UA installs about 46.67% of MailRuUpdater.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Lenovo 50.00%
ASUS 37.50%
Hewlett-Packard 6.25%
Acer 6.25%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE