ThreatExpert's Statistics for Troj/Nonaco-Gen [Sophos]:

Troj/Nonaco-Gen [Sophos] is also known as:

Threat Alias	Number of Incidents
Trojan.BHO [Ikarus]	32
Trojan-Downloader.Win32.BHO.lfm [Kaspersky Lab]	14
TrojanDownloader:Win32/Nonaco.J [Microsoft]	14
Trojan Horse [Symantec]	11
Win-Trojan/Agent.15360.ML [AhnLab]	10
Puper!a [McAfee]	9
Trojan-Downloader.Win32.BHO [Ikarus]	8
Trojan-Downloader.BHO!sd6 [PC Tools]	6
Downloader [Symantec]	4
Trojan-Downloader.Win32.BHO.mfn [Kaspersky Lab]	4
Trojan.Zlob [Symantec]	3
Generic AdClicker.d [McAfee]	2
Generic Downloader.x!cd [McAfee]	2
Trojan-Downloader.Win32.Alphabet.gen [Kaspersky Lab]	2
Trojan-Downloader.Win32.BHO.mip [Kaspersky Lab]	2
Win-Trojan/Bho.15360.J [AhnLab]	2
TROJ_DLOADER.QCR [Trend Micro]	1
Trojan-Downloader.Alphabet!ct [PC Tools]	1
Trojan-Downloader.Win32.Alphabet [Ikarus]	1

Troj/Nonaco-Gen [Sophos] has the following possible country of origin:

Origin		Number of Incidents
	Russian Federation	18

Troj/Nonaco-Gen [Sophos] is known to be created as:

%System%\121973\121973.dll

%System%\199638\199638.dll

%System%\218538\218538.dll

%System%\790151\790151.dll

%System%\796525\796525.dll

%System%\sysloc\sysloc.dll

%Windir%\mgrs.exe

Notes:

%System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
%Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.