Parent process

Related files

dmwu.exe is the installation service for Web Optimizer, an ad-supported program. Web Optimizer by IncrediMail Ltd. is a web browser extension and browser helper object (BHO) for Internet Explorer and Firefox (extension) and distributed through Perion Networks. The Web Optimizer extension includes a search bar which provides modified search redirection results and a search provider. Web Optimizer will attempt to change the default home page of the user's web browser as well.

dmwu.exe runs as a service under the name WebOptimizer with extensive SYSTEM privileges (full administrator access). The file is digitally signed by IncrediMail Ltd. which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Home Premium (6.1.7601.65536).

CPU
Total CPU:	0.00123233%	0.028634%
Kernel CPU:	0.00009506%	0.013761%
User CPU:	0.00113727%	0.014873%
Kernel CPU time:	4,072 ms/min	100,923,805ms/min
Memory
Private memory:	3.89 MB	21.59 MB
Private (maximum):	9.44 MB
Private (minimum):	9.04 MB
Non-paged memory:	3.89 MB	21.59 MB
Virtual memory:	71.1 MB	140.96 MB
Virtual memory (peak):	75.58 MB	169.69 MB
Working set:	9.42 MB	18.61 MB
Working set (peak):	9.59 MB	37.95 MB
Resource allocations
Threads:	8	12
Handles:	389	600

sechost.dll
Total CPU:	0.01015687%	0.272967%
Kernel CPU:	0.00883436%	0.107585%
User CPU:	0.00132251%	0.165382%
CPU cycles:	478,136/sec	5,741,424/sec
Context switches:	9/sec	79/sec
Memory:	100 KB	1.16 MB
dmwu.exe (main module)
Total CPU:	0.00037029%
Kernel CPU:	0.00015870%
User CPU:	0.00021160%
CPU cycles:	9,287/sec
Memory:	364 KB
sprotector.dll (SProtector 1.66.1133)
Total CPU:	0.00015870%
Kernel CPU:	0.00010580%
User CPU:	0.00005290%
CPU cycles:	6,359/sec
Memory:	812 KB