05b13 14.08%
68839 1.41%
11c3a 8.45%
52c18 12.68%
89238 1.41%
be4d9 2.82%
f85eb 1.41%
872f6 1.41%
8ac7e 9.86%
6caf3 4.23%
0ec38 7.04%
c7007 4.23%
81eac 1.41%
bd893 2.82%
a3224 1.41%
08e67 1.41%
99da6 4.23%
60981 7.04%
9b67a 4.23%
45f31 1.41%
199a8 1.41%
ce882 1.41%
36c55 1.41%
382f8 1.41%
418c5 1.41%
(Note, Perion Network Ltd. publishes each variation of this file with the same version, but the hashes are unique.)



By Perion Network Ltd. (Signed)

Remove dmwu.exe
Warning 9 antivirus scanners has detected malware in various versions of dmwu.exe.


dmwu.exe has 25 known versions, the most recent one is . It is started as a Windows Service called 'Updater Service' with the name 'IBUpdaterService'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 1.32 MB. It is an authenticode code-signed executable issued to Perion Network Ltd. by the certification authority VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0096% including both foreground and background operations, the average private memory consumption is about 6.92 MB with the maximum memory reaching around 12.86 MB. Addionally, typically read and write I/O disk operations is about 510 Bytes per minute for reads and 4 Bytes per minute for writes.

What is dmwu.exe?

dmwu.exe is the installation service for Web Optimizer, an ad-supported program. Web Optimizer by Perion Network Ltd. is a web browser extension and browser helper object (BHO) for Internet Explorer and Firefox (extension) and distributed through Perion Networks. The Web Optimizer extension includes a search bar which provides modified search redirection results and a search provider. Web Optimizer will attempt to change the default home page of the user's web browser as well.


File name:dmwu.exe
Typical file path:C:\Windows\System32\dmwu.exe
Issued to:Perion Network Ltd.
Authority (CA):VeriSign
Effective date:Tuesday, April 24, 2012
Expiration date:Friday, April 24, 2015
Windows Service
Service name:IBUpdaterService
Display name:Updater Service
Description:“Updater Service”


(Note, the behaviors below are for all versions of dmwu.exe, select a unique version for details.)
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'IBUpdaterService' (Updater Service)
  • WebOptimizer
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\WINDOWS\system32\dmwu.exe'

MalwareMalware detections

Based on 40+ industry antivirus scanners, 9 of them detected the following malware.
Antivirus engineEngine versionDetectionFile version
ByteHero Trojan.Malware.Obscu.Gen.006 872f6ee37397f9ff147131cec05e15d4
ByteHero Trojan.Malware.Obscu.Gen.006 0ec38f6d0db84900b00fa8aa0e822948
ByteHero Trojan.Malware.Obscu.Gen.006 a3224e67f24c84ecb7660cf75059065a
ESET NOD32 7.8813 Win32/SweetIM.E 0ec38f6d0db84900b00fa8aa0e822948
ESET NOD32 7.8859 a variant of Win32/Toolbar.Perion.G c7007705a6087e76b783a3e6aad16ebf
ESET NOD32 7.8815 a variant of Win32/Toolbar.Perion.G 81eacb021dc52e908187861fd92370b4
ESET NOD32 7.8749 Win32/SweetIM.E a3224e67f24c84ecb7660cf75059065a
ESET NOD32 7.9086 a variant of Win32/Toolbar.Perion.G 609812a01a8845370440c5e592da642d
ESET NOD32 8.9341 Win32/Toolbar.Perion.G be4d946b5d8745dd7cd4ca9ca04f4989

VersionsAll file variations of dmwu.exe

MD5SHA-1File size
05b1323c82849e1cc4e774d470254215 c8644bc3ee9398babfa5174e9f8781c1796be7e0 984.86 KB
688399ff25a4012af16da2e5c3daf050 16772a183d3695633b2810f8dedf62b7b6cb8e20 1.2 MB
11c3a981748cc27f740d6101d6bd7b79 7bfc1966bd13516e79a7d8736c3909098aca6f50 1.2 MB
52c18a4b4ac4778b6980cf8284893fb8 51c951052ff19b82f4b52dab9a5444cfbf98040c 982.86 KB
892385382fc0fb858e0dea031e9c7af7 1d30cd6505c4cf03a6bdd6a08a954456d6b586db 1.25 MB
be4d946b5d8745dd7cd4ca9ca04f4989 1039baa39b5fc7e73168e6e16156e589c7cd6ac9 989.8 KB
f85eb9654b4c771470cd13a0a170d3b9 81a5dcbfe2305d75eb40667e482150411e20502a 1.39 MB
872f6ee37397f9ff147131cec05e15d4 8b652fcd53daee4ab1aa38fc08f9811f0b9af1f4 1.12 MB
8ac7ecad268cf04fb0bac6ae7d300e6d eac027a507b9937cb05cd9ef92b82e2a494cf1f6 1.38 MB
6caf30862ebdade872b42daa9c0d3ee8 4c352d3146018cf8258e66dfe1ee06e16b2751eb 1.21 MB
0ec38f6d0db84900b00fa8aa0e822948 00f269296e3b590fb2b683e18f14ff8eb7d1fb2f 1.11 MB
c7007705a6087e76b783a3e6aad16ebf 23e0a90123d76f3cd264fb782f91cd3d5340c8d3 992.3 KB
81eacb021dc52e908187861fd92370b4 ca5b7c7b7a6ed2cdd926005a2ea505a91a3048db 1.1 MB
bd893b8a19e5fecb2be52cc8ee99c70a a488b891b67b208cb0c2cdaa67c563a6c7c4925c 1.39 MB
a3224e67f24c84ecb7660cf75059065a c7a21426ef306e192397965f05e673a23836c31e 1.11 MB
08e6745b20457ed6913d321eb0b35351 288092d0511b4cc2f1ba84dcb4eb61a0c0c1eb05 1.22 MB
99da6e11d19bc2ae7aa79fd8232406a9 56361703a8988a6079883e36061b3c68ebc84282 1.57 MB
609812a01a8845370440c5e592da642d 21adcf6808e7a4b9218b3e163a2c492256dfeb66 1.28 MB
9b67a92f0e4e271486c5e5abbc1bb095 c66a9e73f7d720b882b124563fc52a11ed5ee023 1.68 MB
45f318d213f34a5028479bc919ecaff6 e766d277786182095ad81ef90d6bf17f469a13a2 1.28 MB
199a8e9712fbb946eb524ca1372e35bf 56f8462d0317b8ed22ccc00c5f3a0ebc2340d3ce 1.67 MB
ce882e66e5b275b9419592ac0f613df6 15bb71dc2337ec763d769c960d218cdb373c1c08 1.68 MB
36c55f1ccdd63a70a18fb97e3f85bf5f 3670895ae4e0d6c17b601e2f7c46f19eeade7566 1.37 MB
382f8e1cf75dd68050e96b5150f6fc37 30b5f20e0ee9b95c8fe32f29d4d1d68b76fe0bb8 1.68 MB
418c5377fb3b5d0ecba4aa37caa2c39d c4ab240d0a5ca07e8957e8f60f2846592c731cef 2.17 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 30.00%
Windows 7 Home Premium 24.29%
Microsoft Windows XP 17.14%
Windows 7 Professional 10.00%
Windows 8 5.71%
Windows Vista Home Premium 5.71%
Windows 8 Single Language 2.86%
Windows 8.1 Pro with Media Center 1.43%
Windows 8 Pro 1.43%
Windows 8 Release Preview 1.43%

Distribution by countryDistribution by country

United States installs about 34.29% of dmwu.exe.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 28.81%
Acer 23.73%
Toshiba 16.95%
Sony 10.17%
Dell 10.17%
MSI 3.39%
ASUS 3.39%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE