Associated Malware Groups
The filename is associated with the malware groups:
- Fraudulent Security Program
- Cloaked Malware
File Behavior
NEVOPUTO.DLL has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Executes a Dynamic Link Library File as a process
- The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
- Found on infected systems and resists interrogation by security products
NEVOPUTO.DLL has been the subject of the following behavior:
- Added as a Registry auto start to load Program on Boot up
- Created as a process on disk
- Registered as a Dynamic Link Library File
- Executed as a process
- Enabled as an In Process Object/Server - Common with DLL Injections
- Added as a Registry Key (DELAY) to auto start Programs on system start up
- The process is hooked into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
Country Of Origin
The filename NEVOPUTO.DLL was first seen on Nov 10 2008 in the following geographical regions of the Prevx community:
- Germany on Nov 10 2008
- Spain on Jan 25 2009
- The United States on Oct 10 2009
- Canada on Oct 10 2009
- The United Arab Emirates on Jan 25 2010
File Name Aliases
NEVOPUTO.DLL can also use the following file names:
- DORIYUBI.DLL
- ZISUDIFI.DLL
- GIMEMULA.DLL
- WEPAKEZU.DLL
- NIWOGEPI.DLL
- DERASAFE.DLL
- JAMAZOTE.DLL
- WAVOYOLU.DLL
- GIHUJASU.DLL
- WINOPEKE.DLL
- GAZIZISA.DLL
- BIMOYUKA.DLL
- SOKOFOSU.DLL
- LIHIYUFI.DLL
- SUNAPIJA.DLL
- RAWIJEKU.DLL
- GEHUSEDA.DLL
- ROTATOPU.DLL
- JIGEDOHU.DLL
- DUTUHABE.DLL
- JEJESAHE.DLL
- MUTELUPO.DLL
- GURINUWE.DLL
- NAHIBOZO.DLL
- MAGENIHO.DLL
- BAKISIPA.DLL
- YEYAPOYU.DLL
- SOBIPORE.DLL
- FOBUNAYI.DLL
- WASODOKU.DLL
- FALUKOVO.DLL
- VURANUNE.DLL
- HARIZEPU.DLL
- NINEGOZU.DLL
- RELIZEVE.DLL
- HUKOVEFO.DLL
- VABAZAJA.DLL
- PEWAFAHU.DLL
- JITUWUWA.DLL
- RAWUYONA.DLL
- DIFINIZO.DLL
- PITEPAKO.DLL
- PUNIDEZU.DLL
- KUJONAGE.DLL
- WANISUPA.DLL
- SABAFIRU.DLL
- TUROVEPI.DLL
- BESEHEVI.DLL
- SEMEHINE.DLL
- NIJEGANO.DLL
- YUSAWAFA.DLL
- HORIJIGE.DLL
- TEJOLUZE.DLL
- TEVAZIVA.DLL
- YUMIKEDI.DLL
- ZOGADELI.DLL
- TEHASEBI.DLL
- BOBEBEJI.DLL
- SEZOGIBE.DLL
- FANESOHU.DLL
- VESEYUSI.DLL
- BEJAMUGE.DLL
- ROSOTUSE.DLL
- NUKIPOPU.DLL
- FAVOGUPO.DLL
- WUYOWOLI.DLL
- SEFIJIRA.DLL
- HABAWOGU.DLL
- SEFEWANA.DLL
- GARAZUHA.DLL
- GEBUHOBO.DLL
- GABOWUTO.DLL
Filesizes
The following file size has been seen:
- 102,103 bytes
- 92,212 bytes
- 90,888 bytes
- 88,576 bytes
- 97,921 bytes
- 41,984 bytes
File Type
The filename NEVOPUTO.DLL refers to many versions of a dynamic link library.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.