Spy Trojan

Trojan-Spy.Win32.Noon.bbky (file analysis)

Malware Removal

The Trojan-Spy.Win32.Noon.bbky is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Noon.bbky virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan-Spy.Win32.Noon.bbky?


File Info:

crc32: E381FD62
md5: ef4d8d522b08503ff75621ef1aaa2356
name: EF4D8D522B08503FF75621EF1AAA2356.mlw
sha1: 2dcce929b02707461aea550d44a6dd0395c172be
sha256: 47084efc1f6a0205db28ae519b750bb03bbfb310609f9924e999e47bd99838dd
sha512: a3e20c9ae09c15f40be500ecada3bd69c2ab8f4626fa3734d4cce1346e2f335dd60cda87cd9391976b2560d5791dfab8b9146fb83d755b1f2b3e7437601c114c
ssdeep: 6144:vrkDY7Qt/uqv8uLjP0uOSlJ6qiOuBw/PaeT5ZfxMeKzzpJm+6fs:TklOSlQqvu+PaeFxCeezQU
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Spy.Win32.Noon.bbky also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanSpy:Win32/Kryptik.8d83f4aa
K7GWTrojan ( 0057fcd01 )
Cybereasonmalicious.9b0270
CyrenW32/Kryptik.ERY.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HLUQ
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyTrojan-Spy.Win32.Noon.bbky
BitDefenderTrojan.GenericKD.46671185
MicroWorld-eScanTrojan.GenericKD.46671185
Ad-AwareTrojan.GenericKD.46671185
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34050.pqZ@aaeUtwfi
VIPRELooksLike.Win32.Crowti.b (v)
TrendMicroTROJ_FRS.0NA103GN21
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
FireEyeGeneric.mg.ef4d8d522b08503f
EmsisoftTrojan.GenericKD.46671185 (B)
SentinelOneStatic AI – Suspicious PE
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Razy.DDB000
GDataTrojan.GenericKD.46671185
McAfeeRDN/MalGenrc
MAXmalware (ai score=89)
VBA32BScope.Trojan.Winlock
TrendMicro-HouseCallTROJ_FRS.0NA103GN21
RisingTrojan.Generic@ML.81 (RDML:sZZIdQd06RHEvptIFA5B0w)
FortinetMalicious_Behavior.SB
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Heur.Generic.HxQBueAA

How to remove Trojan-Spy.Win32.Noon.bbky?

Trojan-Spy.Win32.Noon.bbky removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment