"WINUEB32.DLL"

Cloaked Malware

Free PC Cleanup from Webroot

Use Webroot SecureAnywhere to remove WINUEB32.DLL.

"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User

Get Free PC Cleanup

Associated Malware Groups

The filename is associated with the malware groups:

Cloaked Malware
Malware Downloader
Malicious Software

File Behavior

WINUEB32.DLL has been seen to perform the following behavior:

Found on infected systems and resists interrogation by security products

WINUEB32.DLL has been the subject of the following behavior:

Added as a Registry auto start to load Program on Boot up
Added as a Winlogon Notification DLL to automatically load on system start up
Created as a process on disk
Registered as a Dynamic Link Library File
Copied to multiple locations on the system
Deleted as a process from disk

Country Of Origin

The filename WINUEB32.DLL was first seen on Jun 15 2009 in the following geographical regions of the Webroot community:

Spain on Jun 15 2009
The United Arab Emirates on Jun 15 2009
Korea, Republic of on Oct 25 2009
Europe on Oct 29 2009
The United States on Oct 29 2009
Slovakia on Sep 14 2010
The United Kingdom on Sep 14 2010
Brazil on Sep 20 2011

File Name Aliases

WINUEB32.DLL can also use the following file names:

GUFA5DC.TMP
GUFA5E5.TMP
WINZFG32.DLL
WINMFL32.DLL
WINMTY32.DLL
WINSAJ32.DLL
WINRWJ32.DLL
WINNDG32.DLL
WINDMV32.DLL
WINDCD32.DLL
WINUGY32.DLL
WINXZQ32.DLL
WINEAY32.DLL
WINPIJ32.DLL
WINHYO32.DLL
WINVEG32.DLL
WINILD32.DLL
WINUHY32.DLL
WINFIT32.DLL
WINAKD32.DLL
WINTNY32.DLL
WINQTO32.DLL
WINLOB32.DLL
GUF593.TMP
WINIJT32.DLL
WINYGG32.DLL
WINYYQ32.DLL
WINZCI32.DLL
WINGFV32.DLL
WINOAO32.DLL
WINKSY32.DLL
WINTXL32.DLL
WINJTY32.DLL
WINPYQ32.ROM
PUO8B22.TMP
WINUMR32.ROM
WINWLW32.DLL
WINSAD32.DLL
72163549.DLL

Filesizes

The following file size has been seen:

40,448 bytes
40,960 bytes
63,488 bytes
81,920 bytes

File Type

The filename WINUEB32.DLL refers to many versions of a dynamic link library.

Help the Webroot Community to fight cyber crime

We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.

The filename referred to in this report is often associated with PC infections. If you have a program of this name on your PC and would like to help our research please tell us what you know in the form below:

I have this file on my PC and believe it is an infection
I have this file on my PC and think it has made my PC slower
My firewall asked if I wanted to let this file have access to the Internet
My PC will not work since I noticed this file on it
My antivirus detected this file but won't remove it
I know what this file is and believe it is a Safe program
I am the author of this file and would like to discuss how to have it reclassified as safe

Further Comments or information you'd like to share: (optional)

Your email address if you would like us to contact you about this file and any concerns you may have: (optional)

Virus, Spyware & Malware Center »