Spy Trojan

Trojan-Spy.Win32.Noon.bbqn (file analysis)

Malware Removal

The Trojan-Spy.Win32.Noon.bbqn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Noon.bbqn virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to modify proxy settings

Related domains:

a.uguu.se

How to determine Trojan-Spy.Win32.Noon.bbqn?


File Info:

crc32: 77CE0FDE
md5: afcdd673effcf464d06c021e5ce0d247
name: AFCDD673EFFCF464D06C021E5CE0D247.mlw
sha1: 1cdb3982c3ba493abb500f4e308216454863a32c
sha256: dc30aa91ce95754e6e4351c41ec8fd6b2fce682ad5fb65dde090ef7c5972d446
sha512: 87840a4898f57fa7a91f20139eeb86c1442709e94725b87c4a13776cf7002c6c630ecd37cd09bd7829cba196bcfc9ffc7a733d63df47698aac24e699f594f414
ssdeep: 12288:YXe9PPlowWX0t6mOQwg1Qd15CcYk0We1KU8:VhloDX0XOf4EU8
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

Translation: 0x0809 0x04b0

Trojan-Spy.Win32.Noon.bbqn also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
CylanceUnsafe
CrowdStrikewin/malicious_confidence_70% (W)
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Injector.Autoit.FMD
APEXMalicious
AvastFileRepMetagen [Malware]
CynetMalicious (score: 100)
KasperskyTrojan-Spy.Win32.Noon.bbqn
BitDefenderTrojan.GenericKD.46865416
MicroWorld-eScanTrojan.GenericKD.46865416
Ad-AwareTrojan.GenericKD.46865416
SophosMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
FireEyeGeneric.mg.afcdd673effcf464
WebrootW32.Trojan.Gen
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Woreflint.A!cl
GDataWin32.Trojan.Agent.3BAF47
McAfeeArtemis!AFCDD673EFFC
MAXmalware (ai score=81)
IkarusWin32.Outbreak
MaxSecureTrojan.Malware.300983.susgen
FortinetPossibleThreat.ZDS
AVGFileRepMetagen [Malware]
Paloaltogeneric.ml

How to remove Trojan-Spy.Win32.Noon.bbqn?

Trojan-Spy.Win32.Noon.bbqn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment