Spy Trojan

Trojan-Spy.Win32.Noon.avcs removal instruction

Malware Removal

The Trojan-Spy.Win32.Noon.avcs is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Noon.avcs virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Spy.Win32.Noon.avcs?


File Info:

crc32: 75E7E234
md5: 310d21e5f978987eb5445eb5f48d6bba
name: vbc.exe
sha1: 7c33d82ac25ba7d64ae339dd15259589402d1b6d
sha256: f6fe195dfa82829b7a1dd48c788d1392b7a4e410223123ebc996dd332fd63b17
sha512: 1a8eeabb549635731bacee33db4d79de4b1b6333ab283e8f224dc74a15f6884441962ff383f7494ea1b15387fe64af77b0e8c43ea61151751ce94b5230fb5491
ssdeep: 24576:Pu6J33O0c+JY5UZ+XC0kGso6FaTOA7Ls0UFIg9ZK92wzzzQ7jMJpbSICBzCKEWY:5u0c++OCvkGs9FaTOA7Ls08ZsLz3Q7j
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0809 0x04b0

Trojan-Spy.Win32.Noon.avcs also known as:

DrWebTrojan.StartPage1.28825
MicroWorld-eScanTrojan.GenericKD.33367488
FireEyeGeneric.mg.310d21e5f978987e
Qihoo-360Generic/HEUR/QVM10.2.7583.Malware.Gen
McAfeeArtemis!310D21E5F978
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0056124e1 )
BitDefenderTrojan.GenericKD.33367488
K7GWTrojan ( 0056124e1 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitTrojan.Generic.D1FD25C0
TrendMicroTrojan.Win32.WACATAC.THBBDBO
CyrenW32/AutoIt.NS.gen!Eldorado
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan-Spy.Win32.Noon.avcs
AlibabaTrojan:Application/AitInject.0d0db9c4
NANO-AntivirusTrojan.Win32.StartPage1.hbtmif
Endgamemalicious (high confidence)
SophosTroj/Formbok-DC
ComodoMalware@#1vs44yjfw4zmg
F-SecureTrojan.TR/Autoit.vjxih
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Downloader.tc
FortinetAutoIt/Injector.EXF!tr
Trapminemalicious.moderate.ml.score
EmsisoftTrojan.GenericKD.33367488 (B)
IkarusTrojan.Autoit
F-ProtW32/AutoIt.NS.gen!Eldorado
AviraTR/Autoit.vjxih
MAXmalware (ai score=86)
MicrosoftTrojan:Win32/Occamy.C
AegisLabTrojan.Win32.Autoit.4!c
ZoneAlarmTrojan-Spy.Win32.Noon.avcs
AhnLab-V3Trojan/AU3.Wacatac.S1079
VBA32Trojan.StartPage
ALYacTrojan.Agent.Wacatac
Ad-AwareTrojan.GenericKD.33367488
MalwarebytesTrojan.MalPack.AutoIt.Generic
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Injector.Autoit.FCR
TrendMicro-HouseCallTrojan.Win32.WACATAC.THBBDBO
TencentWin32.Trojan-spy.Noon.Lfgf
GDataTrojan.GenericKD.33367488
AVGScript:SNH-gen [Trj]
Cybereasonmalicious.ac25ba
AvastScript:SNH-gen [Trj]
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan-Spy.Win32.Noon.avcs?

Trojan-Spy.Win32.Noon.avcs removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment