Associated Malware Groups
The filename is associated with the malware groups:
- Fraudulent Security Program
- Cloaked Malware
File Behavior
TOMUZIPU.DLL has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Executes a Dynamic Link Library File as a process
- Found on infected systems and resists interrogation by security products
TOMUZIPU.DLL has been the subject of the following behavior:
- Enabled as an In Process Object/Server - Common with DLL Injections
- Created as a process on disk
- Added as a Registry Key (DELAY) to auto start Programs on system start up
- Added as a Registry auto start to load Program on Boot up
- The process is hooked into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
- Registered as a Dynamic Link Library File
- Executed as a process
Country Of Origin
The filename TOMUZIPU.DLL was first seen on Jan 26 2010 in the following geographical regions of the Prevx community:
- The United States on Jan 26 2010
- The United Arab Emirates on Jan 26 2010
File Name Aliases
TOMUZIPU.DLL can also use the following file names:
- DETOVINA.DLL
- JEDEPONA.DLL
- WIKUFALU.DLL
- BEKIRUSI.DLL
- LUDUBANU.DLL
- HISAKITE.DLL
- HULIFEKI.DLL
- MELOTOSO.DLL
- PERORUVO.DLL
- FIZELUGO.DLL
- MULUMOBU.DLL
- TEWAWIHU.DLL
- YULOREME.DLL
- LUGATEPO.DLL
- TENOLABO.DLL
- SAWIKALI.DLL
- JEPUZUWE.DLL
- YAYUTOTO.DLL
- GOJUTUGI.DLL
- RAHEHUVO.DLL
- TUZAKUPE.DLL
- YOFAMOYU.DLL
- FANUDUGU.DLL
- FOLAWAYU.DLL
- TORAZOVI.DLL
- PEBIGAMU.DLL
- ZETIFARO.DLL
- ZIBUWETI.DLL
- TUWAMIGA.DLL
- DOJEVABI.DLL
- RUNIVITO.DLL
- HEVIPEZO.DLL
- TIWEDIHU.DLL
- RUZAMAKO.DLL
- PIBEJAFI.DLL
- PAJOHEBU.DLL
- NOJEPAKE.DLL
- HETIRIKA.DLL
- SOBAMEHU.DLL
- FEYUMAZE.DLL
- SEMABAWE.DLL
- HEMEMEFO.DLL
- DUDUMESE.DLL
- BEHOBUVA.DLL
- TUTEPEGA.DLL
- ZELOKORE.DLL
- KISAFIGU.DLL
- POHUNAZI.DLL
- FEBIBOTE.DLL
- POJABESE.DLL
- TOMILUVO.DLL
- TUVIKIZE.DLL
- YIBESEFI.DLL
- VETUYIJA.DLL
- 97487398.DLL
Filesizes
The following file size has been seen:
- 92,160 bytes
- 102,129 bytes
- 70,144 bytes
- 109,296 bytes
- 63,714 bytes
- 38,400 bytes
File Type
The filename TOMUZIPU.DLL refers to many versions of a dynamic link library.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.