Spy

Spyware.Noon removal tips

Malware Removal

The Spyware.Noon is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Spyware.Noon virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Urdu (Pakistan)
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

How to determine Spyware.Noon?


File Info:

crc32: 200B3DDA
md5: 19e89c4a6a0012bc509d67f7187e6ad3
name: vbc.exe
sha1: cee902c826bf80b7d86290c6b95af392095d0cb1
sha256: 277c69c8f6d9e8f396455ba5ba927507ac0f7b88501e21d719d7e83b94a1dc91
sha512: 2e9f13ca9c19cb54a10004ad91b5e692ac69f8cf496d27b10bdc375111f0ca9f55b6684d3e245f315af82645e3a8f0a7316ff2cd83fe3dc4459541147770ce35
ssdeep: 6144:lrY4Y4ihgDfqFQaycCS2ai+Req/birp2etF+BB5dip/h0:mThgWFnb2a2arE/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
ProductVersion: 1.00
InternalName: koerljk
FileVersion: 1.00
OriginalFilename: koerljk.exe
ProductName: Doea

Spyware.Noon also known as:

MicroWorld-eScanTrojan.GenericKD.32762204
McAfeeFareit-FQG!19E89C4A6A00
CylanceUnsafe
VIPREBackdoor.VB.Tofsee.f (v)
K7AntiVirusTrojan ( 0055c5b41 )
AlibabaTrojan:Win32/Injector.b8a73eb9
K7GWTrojan ( 0055c5b41 )
CyrenW32/Trojan.LEPN-8425
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.EJEI
AvastFileRepMalware
KasperskyTrojan-Spy.Win32.Noon.arab
BitDefenderTrojan.GenericKD.32762204
Ad-AwareTrojan.GenericKD.32762204
DrWebTrojan.Siggen8.58044
McAfee-GW-EditionBehavesLike.Win32.Generic.gh
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.19e89c4a6a0012bc
SophosMal/Generic-S
SentinelOneDFI – Suspicious PE
MAXmalware (ai score=100)
ArcabitTrojan.Generic.D1F3E95C
ZoneAlarmTrojan-Spy.Win32.Noon.arab
MicrosoftTrojan:Win32/Pynamer.B!ac
AhnLab-V3Win-Trojan/VBKrand.Gen
Acronissuspicious
ALYacSpyware.Noon.gen
MalwarebytesTrojan.Crypt
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002H0CKR19
IkarusWin32.Outbreak
GDataTrojan.GenericKD.32762204
BitDefenderThetaGen:NN.ZevbaF.32515.Cm0@aqZxhXjO
AVGFileRepMalware
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360HEUR/QVM03.0.81F7.Malware.Gen

How to remove Spyware.Noon?

Spyware.Noon removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment