Trojan.Win32.Neurevt is a multifunctional Trojan written in C++. Also known as Betabot.
The Trojan uses rootkit technology to hide its presence in the operating system, injects code into all running processes, blocks some anti-virus software, and can spread via USB flash drives. The Trojan can also monitor and block installation of other common Trojans, perform DDoS attacks, intercept and spoof user traffic, grab passwords from applications using FTP, POP3, and SSH, spoof DNS requests, find and send files of interest on the computer to the cybercriminal, and create a SOCKS proxy server.
Geographical distribution of attacks by the Trojan.Win32.Neurevt family
Geographical distribution of attacks during the period from 30 May 2015 to 30 May 2016
Top 10 countries with most attacked users (% of total attacks)
* Percentage among all unique Kaspersky Lab users worldwide who were attacked by this malware