Part of the Yontoo web browser plugin (delivers advertisements to the web browser in the form of injected banners, text-links, popups, etc.) the updater mechanism for UpperFind will automatically keep the extension patched by downloaded new functionality which is auto-enabled by default. The application updateupperfind.exe by UpperFind has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It runs as a separate (within the context of its own process) windows Service named “Update UpperFind”.