Spy Trojan

How to remove “Trojan-Spy.Win32.Noon.atlw”?

Malware Removal

The Trojan-Spy.Win32.Noon.atlw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Noon.atlw virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Trojan-Spy.Win32.Noon.atlw?


File Info:

crc32: C41C4CEF
md5: c3a494601367cd02737f3e0cdb203dac
name: vbc.exe
sha1: d7fa0fe591eecc23f8df9d8136fbca8b261da66f
sha256: ebba7a6f3239df94183b8bf033bd11b39dafeb28c0d0de550c297dab5b458a2e
sha512: cf6ea82fa943af02985f496e05d1a307973b7ada8b8cc33905cc2898928bcf99911f323c29198bc091a211968c607fccf1e63f9e179eecabcda9cb3eb2bc7f16
ssdeep: 24576:ou6J33O0c+JY5UZ+XC0kGso6Fat9i9m5VVnjuu7kR7l/DcX9BMKQYbWY:Cu0c++OCvkGs9Fatw9iPubGX9aY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Trojan-Spy.Win32.Noon.atlw also known as:

McAfeeArtemis!C3A494601367
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
CrowdStrikewin/malicious_confidence_60% (W)
K7GWTrojan ( 0055f86c1 )
Invinceaheuristic
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.Autoit.EZK
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan-Spy.Win32.Noon.atlw
AlibabaTrojan:Win32/Predator.c94b984c
Endgamemalicious (high confidence)
F-SecureTrojan.TR/Autoit.dhtlb
TrendMicroTrojan.Win32.WACATAC.THABHBO
McAfee-GW-EditionBehavesLike.Win32.Downloader.tc
FortinetAutoIt/Injector.EYX!tr
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.c3a494601367cd02
SophosMal/Generic-S
WebrootW32.Trojan.Gen
AviraTR/Autoit.dhtlb
MicrosoftTrojan:Win32/Predator.BC!MTB
ZoneAlarmTrojan-Spy.Win32.Noon.atlw
PandaTrj/CI.A
TrendMicro-HouseCallTrojan.Win32.WACATAC.THABHBO
RisingTrojan.Obfus/Autoit!1.C075 (CLASSIC)
IkarusTrojan-Spy.Keylogger.AgentTesla
GDataWin32.Packed.Kryptik.OCHQGN
AVGFileRepMalware
Cybereasonmalicious.591eec
AvastFileRepMalware
Qihoo-360Win32/Trojan.Spy.608

How to remove Trojan-Spy.Win32.Noon.atlw?

Trojan-Spy.Win32.Noon.atlw removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment