EuWatch.exe
EaseUS Todo Backup by CHENGDU YIWO Tech Development Co. (Signed)
Warning 3 antivirus scanners has detected malware in various versions of EuWatch.exe.
Overview
euwatch.exe has 4 known versions, the most recent one is 5.8.0.0. euwatch.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 69.09 KB. It is an authenticode code-signed executable issued to CHENGDU YIWO Tech Development Co. by the certification authority VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0001% including both foreground and background operations, the average private memory consumption is about 1.62 MB with the maximum memory reaching around 5.35 MB. Addionally, typically read and write I/O disk operations is about 0 Bytes per minute for reads and 0 Bytes per minute for writes.
 Details
|
| File name: | euwatch.exe |
| Publisher: | CHENGDU YIWO Tech Development Co., Ltd |
| Product name: | EaseUS Todo Backup |
| Description: | EaseUS Todo Backup Application |
| Typical file path: | C:\Program Files\easeus\todo backup\bin\euwatch.exe |
| Certificate |
| Issued to: | CHENGDU YIWO Tech Development Co. |
| Authority (CA): | VeriSign |
| Expiration date: | Sunday, November 9, 2014 |
Behaviors
(Note, the behaviors below are for all versions of euwatch.exe, select a unique version for details.)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'EaseUs Watch' → "C:\Program Files\EaseUS\Todo Backup\bin\EuWatch.exe"
Malware detections
Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
| Antivirus engine | Engine version | Detection | File version |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V0721 |
3, 5, 0, 1 |
| Vba32 AntiVirus |
3.12.18.2 |
Worm.Qvod.crf |
3, 5, 0, 1 |
| ViRobot |
2011.4.7.4223 |
Worm.Win32.A.Qvod.140800 |
3, 5, 0, 1 |
All file variations of euwatch.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
41.67% |
|
| Windows 7 Professional |
25.00% |
|
| Windows 8 |
16.67% |
|
| Windows 8 Pro |
16.67% |
|
Distribution by country
United States installs about 66.67% of EaseUS Todo Backup.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
80.00% |
|
| Intel |
13.33% |
|
| American Megatrends |
6.67% |
|
