What is “Backdoor:Win32/Numnom.A”?

The Backdoor:Win32/Numnom.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Numnom.A virus can do?

• A file was accessed within the Public folder.
• Uses Windows utilities for basic functionality
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Injection with CreateRemoteThread in a remote process
• Anomalous binary characteristics

How to determine Backdoor:Win32/Numnom.A?

File Info:
name: 3337597DB945467F4EF6.mlw
path: /opt/CAPEv2/storage/binaries/cfa3cb4ebdeaeaab43d41139e895603587c0de6609936029b2c66f4a91998c25
crc32: 67586729
md5: 3337597db945467f4ef6458baa2c525b
sha1: 6ecef2b93c495a5e931ee3218fcd61e0de19010b
sha256: cfa3cb4ebdeaeaab43d41139e895603587c0de6609936029b2c66f4a91998c25
sha512: 7818b688ea43eb2450adb216000e06deb094c7bc71aafda9653dce1c427102a1bd69b09b76d6f549aa523ff636a0f38576c4ea0d4cbe68a7cc4460568cd465f9
ssdeep: 12288:DHlhrKftOGyIL1DfnbotaMOOg179O8jC6OYwlaSHrpnIQIXAMEPJNuIVgq8qcXjP:hbIL17ncFU9DsoI2+PuIKqpmOQJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T113F4232DA1A467D3EB4B323B30FB437C140E5C2BD67E5C3668B9D52D08F69788817A19
sha3_384: c78b784fb3551fd35959a9cf4ff0282caaa13f8004b776cdb3913ab6a9688bb12486e7588411cda25b8f8b1db91bf4d8
ep_bytes: e881040000e936fdffff8bff558bec81
timestamp: 2009-11-24 11:10:05

Version Info:
0: [No Data]

Backdoor:Win32/Numnom.A also known as:

How to remove Backdoor:Win32/Numnom.A?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.