EuWatch.exe
EaseUS Todo Backup by CHENGDU YIWO Tech Development Co. (Signed)
| Version: | 3, 5, 0, 1 |
| MD5: | fe62b4c0f1ffca8d6554cf03cf7f88dd |
| SHA1: | 2d1c126e63cb52508a9e936c070fbf7e8c077469 |
| SHA256: | a899dd307bcd12b8f8d1df03f700ffd44ebf7ea779e4046f9056fb07198f8bbc |
Warning 3 antivirus scanners has detected malware.
Overview
euwatch.exe is malware that executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by CHENGDU YIWO Tech Development Co. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | euwatch.exe |
| Publisher: | CHENGDU YIWO Tech Development Co., Ltd |
| Product name: | EaseUS Todo Backup |
| Description: | EaseUS Todo Backup Application |
| Typical file path: | C:\Program Files\easeus\todo backup\bin\euwatch.exe |
| File version: | 3, 5, 0, 1 |
| Product version: | 3.5.0.1 |
| Size: | 69.13 KB (70,792 bytes) |
| Build date: | 12/22/2011 2:55 PM |
| Certificate |
| Issued to: | CHENGDU YIWO Tech Development Co. |
| Authority (CA): | VeriSign |
| Expiration date: | Sunday, November 9, 2014 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'EaseUs Watch' → "C:\Program Files\EaseUS\Todo Backup\bin\EuWatch.exe"
Malware detections
Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V0721 |
| Vba32 AntiVirus |
3.12.18.2 |
Worm.Qvod.crf |
| ViRobot |
2011.4.7.4223 |
Worm.Win32.A.Qvod.140800 |
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00000188% | |
| Kernel CPU: | 0.00000188% | |
| Kernel CPU time: | 156,001 ms/min | |
| Memory |
| Private memory: | 1.45 MB | |
| Private (maximum): | 4.8 MB | |
| Private (minimum): | 120 KB | |
| Non-paged memory: | 1.45 MB | |
| Virtual memory: | 53.15 MB | |
| Virtual memory (peak): | 61.06 MB | |
| Working set: | 460 KB | |
| Working set (peak): | 4.81 MB | |
| Resource allocations |
| Threads: | 2 | |
| Handles: | 69 | |
| GUI GDI count: | 16 | |
| GUI GDI peak: | 19 | |
| GUI USER count: | 9 | |
| GUI USER peak: | 9 | |
Process properties
| Integrety level: | Medium |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\easeus\todo backup\bin\euwatch.exe" |
| Owner: | User |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
41.67% |
|
| Windows 7 Professional |
25.00% |
|
| Windows 8 |
16.67% |
|
| Windows 8 Pro |
16.67% |
|
Distribution by country
United States installs about 66.67% of EaseUS Todo Backup.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
80.00% |
|
| Intel |
13.33% |
|
| American Megatrends |
6.67% |
|
