Win32/Spy.Numando.L removal guide

The Win32/Spy.Numando.L is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Spy.Numando.L virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

How to determine Win32/Spy.Numando.L?


File Info:
crc32: 6D4B987A
md5: 1a5da2e3247ca47377572ff8fc940388
name: upload_file
sha1: 5eaa0db1a2ef581e67650d8623e77575dc645f2a
sha256: bf4c790ed75074b826071aa764c692ca84b78159759909fdfff5cf4ac4672c20
sha512: 20844cf5f7f40a9480a21fb632d4553f220c527ff4d333ab86f3aea6ddb171bc7b4e502c881f1bc1db1a55c7f01eb8d78f8bfa0acaab5c11bf3c93320bedf6b5
ssdeep: 196608:AmpRwfUHh3EZlNwrmG69oomPqWmuQRwXz3ySESliifBSuJQqJ096ejFYVDkN:AUCffZlNwrSooGqWm8Xz3r9fECQqJ09
type: Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Last Printed: Fri Dec 11 11:47:44 2009, Create Time/Date: Fri Dec 11 11:47:44 2009, Last Saved Time/Date: Fri Dec 11 11:47:44 2009, Security: 0, Code page: 1252, Revision Number: C2970EA9-A345-420C-8BE6-87F92027C659, Number of Words: 10, Subject: Microsoft, Author: Partner, Name of Creating Application: Advanced Installer 15.9 build daae28bc, Template: ;1046, Comments: cleanup  Microsoft., Title: Installation Database, Keywords: Installer, MSI, Database, Number of Pages: 200

Version Info:
0: [No Data]

Win32/Spy.Numando.L also known as:

DrWeb	Trojan.Packed2.42635
McAfee	Artemis!09CBF40A3666
Invincea	Mal/Generic-S
Symantec	Trojan.Gen.MBT
TrendMicro-HouseCall	TROJ_FRS.VSNTJG20
Avast	Win32:Malware-gen
NANO-Antivirus	Virus.Win32.Gen.ccmw
Comodo	Malware@#24vygbm3eicus
TrendMicro	TROJ_FRS.VSNTJG20
McAfee-GW-Edition	Artemis!09CBF40A3666
Microsoft	Trojan:Win32/Bluteal!rfn
ZoneAlarm	Trojan-Banker.Win32.Banbra.wurn
ESET-NOD32	a variant of Win32/Spy.Numando.L.gen
Ikarus	Trojan-Spy.Agent
Fortinet	PossibleThreat.PALLAS.H
AVG	Win32:Malware-gen

How to remove Win32/Spy.Numando.L?

Win32/Spy.Numando.L removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X