Spy Trojan

What is “Trojan-Spy.Win32.Noon.auiu”?

Malware Removal

The Trojan-Spy.Win32.Noon.auiu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Noon.auiu virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Spy.Win32.Noon.auiu?


File Info:

crc32: A45768C3
md5: 969476dfddb18b75a99e52da0d34921e
name: winstore.exe
sha1: 0b25af64985c4001584285ed240924c8c8c6fecb
sha256: cbd2d9962e762a0966820cee65ddf544456d00b1dc65974355ac241f65b65fdd
sha512: 43945d9651af2a4dd2fb7c42a76f2420f251896de1cfcf539b303fbf2b1bd7631f208edd646738581e5219fd1be8328a7ada270f8e5d32ee01cf3327a791d635
ssdeep: 768:B9bzssX1xdq0AJktWN5qXgmT/JdfFuBaIs7:B9XskHq0ok251a/D97
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: Kvaksa
FileVersion: 1.00
CompanyName: Udbetale
ProductName: reserveri
ProductVersion: 1.00
OriginalFilename: Kvaksa.exe

Trojan-Spy.Win32.Noon.auiu also known as:

Qihoo-360Generic/HEUR/QVM03.0.287C.Malware.Gen
McAfeeFareit-FRL!969476DFDDB1
SangforMalware
K7AntiVirusTrojan ( 005605041 )
K7GWTrojan ( 005605041 )
BitDefenderThetaGen:NN.ZevbaF.34090.dm0@ai12iRfi
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.EKLT
AvastWin32:Trojan-gen
KasperskyTrojan-Spy.Win32.Noon.auiu
RisingTrojan.Injector!8.C4 (CLOUD)
F-SecureTrojan.TR/Crypt.ZPACK.wfirl
DrWebTrojan.Siggen9.10323
McAfee-GW-EditionBehavesLike.Win32.Trojan.km
SentinelOneDFI – Suspicious PE
Trapminesuspicious.low.ml.score
SophosMal/FareitVB-W
APEXMalicious
WebrootW32.Trojan.Gen
AviraTR/Crypt.ZPACK.wfirl
FortinetW32/Injector.EKLH!tr
MicrosoftTrojan:Win32/Wacatac.C!ml
ZoneAlarmTrojan-Spy.Win32.Noon.auiu
MalwarebytesTrojan.MalPack.VB
TencentWin32.Trojan.Inject.Auto
IkarusTrojan.VB.Crypt
GDataWin32.Packed.Kryptik.508AY9
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan-Spy.Win32.Noon.auiu?

Trojan-Spy.Win32.Noon.auiu removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment