About “Trojan:MSIL/SpyNoon.RF!MTB” infection

The Trojan:MSIL/SpyNoon.RF!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/SpyNoon.RF!MTB virus can do?

The binary likely contains encrypted or compressed data.

How to determine Trojan:MSIL/SpyNoon.RF!MTB?


File Info:
crc32: CFDD5BD8
md5: 924ec1397ce7d2729b9833a89ca22687
name: 924EC1397CE7D2729B9833A89CA22687.mlw
sha1: 2367f1abd06ec6cbdb10fda71c0f4347c7b0917f
sha256: ef6bd355a992d56acded360e18b9b4e6124cd95fa3e79453ffb7347b878e93b1
sha512: fa4c5247fc67fe9eda5a10db7218a404fccf53942bc8b267161f222ef12446f69c6e7a3a299b68987e3af500539206181b29ba6ef8cd7c024f9fcd03305e6d2b
ssdeep: 49152:Za1QzkbBGRPpaif65XFH6hLufnSAq58PUYY0Kq5W:ZYFbBGRP0SYFHILq5q0KyW
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
0: [No Data]

Trojan:MSIL/SpyNoon.RF!MTB also known as:

K7AntiVirus	Trojan ( 0057d5641 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.783
McAfee	PWS-FCZH!924EC1397CE7
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
K7GW	Trojan ( 0057d5641 )
Cybereason	malicious.bd06ec
ESET-NOD32	a variant of MSIL/Kryptik.ABEZ
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan-Spy.MSIL.Quasar.gen
Sophos	ML/PE-A
F-Secure	Trojan.TR/Injector.ajypp
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
FireEye	Generic.mg.924ec1397ce7d272
SentinelOne	Static AI – Malicious PE
Avira	TR/Injector.ajypp
Antiy-AVL	Trojan/Generic.ASMalwS.334CD57
Microsoft	Trojan:MSIL/SpyNoon.RF!MTB
Gridinsoft	Trojan.Win32.Kryptik.oa!s1
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Quasar.gen
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.1947378283
Panda	Trj/GdSda.A
Fortinet	MSIL/Kryptik.ABEZ!tr

How to remove Trojan:MSIL/SpyNoon.RF!MTB?

Trojan:MSIL/SpyNoon.RF!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X