Categories: SpyTrojan

What is “Trojan-Spy.Win32.Noon.arab”?

The Trojan-Spy.Win32.Noon.arab is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Spy.Win32.Noon.arab virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Urdu (Pakistan)
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related Domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Spy.Win32.Noon.arab?


File Info:
crc32: 200B3DDAmd5: 19e89c4a6a0012bc509d67f7187e6ad3name: vbc.exesha1: cee902c826bf80b7d86290c6b95af392095d0cb1sha256: 277c69c8f6d9e8f396455ba5ba927507ac0f7b88501e21d719d7e83b94a1dc91sha512: 2e9f13ca9c19cb54a10004ad91b5e692ac69f8cf496d27b10bdc375111f0ca9f55b6684d3e245f315af82645e3a8f0a7316ff2cd83fe3dc4459541147770ce35ssdeep: 6144:lrY4Y4ihgDfqFQaycCS2ai+Req/birp2etF+BB5dip/h0:mThgWFnb2a2arE/type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0ProductVersion: 1.00InternalName: koerljkFileVersion: 1.00OriginalFilename: koerljk.exeProductName: Doea

Trojan-Spy.Win32.Noon.arab also known as:

MicroWorld-eScan	Trojan.GenericKD.32762204
McAfee	Fareit-FQG!19E89C4A6A00
Cylance	Unsafe
VIPRE	Backdoor.VB.Tofsee.f (v)
K7AntiVirus	Trojan ( 0055c5b41 )
Alibaba	Trojan:Win32/Injector.b8a73eb9
K7GW	Trojan ( 0055c5b41 )
Cyren	W32/Trojan.LEPN-8425
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EJEI
Avast	FileRepMalware
Kaspersky	Trojan-Spy.Win32.Noon.arab
BitDefender	Trojan.GenericKD.32762204
Ad-Aware	Trojan.GenericKD.32762204
DrWeb	Trojan.Siggen8.58044
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.19e89c4a6a0012bc
Sophos	Mal/Generic-S
SentinelOne	DFI – Suspicious PE
MAX	malware (ai score=100)
Arcabit	Trojan.Generic.D1F3E95C
ZoneAlarm	Trojan-Spy.Win32.Noon.arab
Microsoft	Trojan:Win32/Pynamer.B!ac
AhnLab-V3	Win-Trojan/VBKrand.Gen
Acronis	suspicious
ALYac	Spyware.Noon.gen
Malwarebytes	Trojan.Crypt
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002H0CKR19
Ikarus	Win32.Outbreak
GData	Trojan.GenericKD.32762204
BitDefenderTheta	Gen:NN.ZevbaF.32515.Cm0@aqZxhXjO
AVG	FileRepMalware
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	HEUR/QVM03.0.81F7.Malware.Gen