Versions

05b13	14.08%
68839	1.41%
11c3a	8.45%
52c18	12.68%
89238	1.41%
be4d9	2.82%
f85eb	1.41%
872f6	1.41%
8ac7e	9.86%
6caf3	4.23%
0ec38	7.04%
c7007	4.23%
81eac	1.41%
bd893	2.82%
a3224	1.41%
08e67	1.41%
99da6	4.23%
60981	7.04%
9b67a	4.23%
45f31	1.41%
199a8	1.41%
ce882	1.41%
36c55	1.41%
382f8	1.41%
418c5	1.41%

Warning 9 antivirus scanners has detected malware in various versions of dmwu.exe.

dmwu.exe has 25 known versions, the most recent one is . It is started as a Windows Service called 'Updater Service' with the name 'IBUpdaterService'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 1.32 MB. It is an authenticode code-signed executable issued to Perion Network Ltd. by the certification authority VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0096% including both foreground and background operations, the average private memory consumption is about 6.92 MB with the maximum memory reaching around 12.86 MB. Addionally, typically read and write I/O disk operations is about 510 Bytes per minute for reads and 4 Bytes per minute for writes.

dmwu.exe is the installation service for Web Optimizer, an ad-supported program. Web Optimizer by Perion Network Ltd. is a web browser extension and browser helper object (BHO) for Internet Explorer and Firefox (extension) and distributed through Perion Networks. The Web Optimizer extension includes a search bar which provides modified search redirection results and a search provider. Web Optimizer will attempt to change the default home page of the user's web browser as well.

Based on 40+ industry antivirus scanners, 9 of them detected the following malware.