NEVOPUTO.DLL

Fraudulent Security Program

Free PC Cleanup from Webroot

Use Webroot SecureAnywhere to remove NEVOPUTO.DLL.

"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User

Get Free PC Cleanup

Associated Malware Groups

The filename is associated with the malware groups:

Fraudulent Security Program
Cloaked Malware

File Behavior

NEVOPUTO.DLL has been seen to perform the following behavior:

The Process is packed and/or encrypted using a software packing process
Executes a Dynamic Link Library File as a process
The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
Found on infected systems and resists interrogation by security products

NEVOPUTO.DLL has been the subject of the following behavior:

Added as a Registry auto start to load Program on Boot up
Created as a process on disk
Registered as a Dynamic Link Library File
Executed as a process
Enabled as an In Process Object/Server - Common with DLL Injections
Added as a Registry Key (DELAY) to auto start Programs on system start up
The process is hooked into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents

Country Of Origin

The filename NEVOPUTO.DLL was first seen on Nov 10 2008 in the following geographical regions of the Webroot community:

Germany on Nov 10 2008
Spain on Jan 25 2009
The United States on Oct 10 2009
Canada on Oct 10 2009
The United Arab Emirates on Jan 25 2010

File Name Aliases

NEVOPUTO.DLL can also use the following file names:

DORIYUBI.DLL
ZISUDIFI.DLL
GIMEMULA.DLL
WEPAKEZU.DLL
NIWOGEPI.DLL
DERASAFE.DLL
JAMAZOTE.DLL
WAVOYOLU.DLL
GIHUJASU.DLL
WINOPEKE.DLL
GAZIZISA.DLL
BIMOYUKA.DLL
SOKOFOSU.DLL
LIHIYUFI.DLL
SUNAPIJA.DLL
RAWIJEKU.DLL
GEHUSEDA.DLL
ROTATOPU.DLL
JIGEDOHU.DLL
DUTUHABE.DLL
JEJESAHE.DLL
MUTELUPO.DLL
GURINUWE.DLL
NAHIBOZO.DLL
MAGENIHO.DLL
BAKISIPA.DLL
YEYAPOYU.DLL
SOBIPORE.DLL
FOBUNAYI.DLL
WASODOKU.DLL
FALUKOVO.DLL
VURANUNE.DLL
HARIZEPU.DLL
NINEGOZU.DLL
RELIZEVE.DLL
HUKOVEFO.DLL
VABAZAJA.DLL
PEWAFAHU.DLL
JITUWUWA.DLL
RAWUYONA.DLL
DIFINIZO.DLL
PITEPAKO.DLL
PUNIDEZU.DLL
KUJONAGE.DLL
WANISUPA.DLL
SABAFIRU.DLL
TUROVEPI.DLL
BESEHEVI.DLL
SEMEHINE.DLL
NIJEGANO.DLL
YUSAWAFA.DLL
HORIJIGE.DLL
TEJOLUZE.DLL
TEVAZIVA.DLL
YUMIKEDI.DLL
ZOGADELI.DLL
TEHASEBI.DLL
BOBEBEJI.DLL
SEZOGIBE.DLL
FANESOHU.DLL
VESEYUSI.DLL
BEJAMUGE.DLL
ROSOTUSE.DLL
NUKIPOPU.DLL
FAVOGUPO.DLL
WUYOWOLI.DLL
SEFIJIRA.DLL
HABAWOGU.DLL
SEFEWANA.DLL
GARAZUHA.DLL
GEBUHOBO.DLL
GABOWUTO.DLL
97610336.DAT
16773764.DAT

Filesizes

The following file size has been seen:

92,212 bytes
107,008 bytes
90,888 bytes
88,576 bytes
97,921 bytes
41,984 bytes

File Type

The filename NEVOPUTO.DLL refers to many versions of a dynamic link library.

Help the Webroot Community to fight cyber crime

We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.

The filename referred to in this report is often associated with PC infections. If you have a program of this name on your PC and would like to help our research please tell us what you know in the form below:

I have this file on my PC and believe it is an infection
I have this file on my PC and think it has made my PC slower
My firewall asked if I wanted to let this file have access to the Internet
My PC will not work since I noticed this file on it
My antivirus detected this file but won't remove it
I know what this file is and believe it is a Safe program
I am the author of this file and would like to discuss how to have it reclassified as safe

Further Comments or information you'd like to share: (optional)

Your email address if you would like us to contact you about this file and any concerns you may have: (optional)

Virus, Spyware & Malware Center »