Malware

Application.Yek.1 removal guide

Malware Removal

The Application.Yek.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.Yek.1 virus can do?

  • Reads data out of its own binary image
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Application.Yek.1?


File Info:

crc32: 7BAD3B4B
md5: fc0e021fbe6179aa13eda921f23b4bbf
name: engwordfreq_key.exe
sha1: 2dc5ddef9d08c42052707eec7f4eaf40775a604c
sha256: 862f871d2aace843f82bdd8a73bd9f68cda7426d16bed2e86ce6f5037d303b2b
sha512: 9a7a7acf5f6c50f4f66698050dc0c5962410bf75c57e6dc70593bab938399fc62efacc526f70289b5cfcf9cedd9df9ef0ef5da4b9444efbbded5a795b18a4957
ssdeep: 384:bQ00crMPJYnnFMCKe9L628JaPyYXn8b39z9vR:000cAP6nKkL63kE9z9v
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x7248x6743x6240x6709(C) 2000-2002x5e74 x5218x5065x82f1
InternalName: KEYMAKE
FileVersion: 1.73
CompanyName: x5218x5065x82f1
ProductName: x6ce8x518cx5668
ProductVersion: 1.73
FileDescription: x6ce8x518cx5668
OriginalFilename: KEYMAKE.EXE
Translation: 0x0804 0x04b0

Application.Yek.1 also known as:

nProtectTrojan/W32.Agent.18618
CAT-QuickHealTrojan.Agent.ATV
McAfeeArtemis!FC0E021FBE61
TheHackerBackdoor/Way.2002.ae
K7AntiVirusTrojan
VirusBusterBackdoor.Agent!zvAWyyw6i5o
NOD32Win32/Agent.OOP
F-ProtW32/Heuristic-210!Eldorado
SymantecTrojan Horse
NormanW32/Smalltroj.KXF
TrendMicro-HouseCallTROJ_AGENT.LAX
eSafeSuspicious File
ClamAVTrojan.Bifrose-2161
BitDefenderGen:Variant.Application.Yek.1
SUPERAntiSpywareTrojan.Agent/Gen-Banker
ComodoApplicUnwnt.Win32.Keymake.~0
F-SecureTrojan:W32/Agent.IHS
DrWebBackDoor.Way.62
VIPRETrojan.Win32.Packer.UPX-ScramblerRCv1.x (ep)
AntiVirSPR/Keymake
TrendMicroTROJ_AGENT.LAX
McAfee-GW-EditionArtemis!FC0E021FBE61
SophosTroj/Crack-I
eTrust-VetWin32/SillyDl.NUM
MicrosoftTrojanDownloader:Win32/Agent
ViRobotBackdoor.Win32.Bifrose.18803
GDataGen:Variant.Application.Yek.1
CommtouchW32/Heuristic-210!Eldorado
AhnLab-V3Win-AppCare/Keymake.18941
VBA32Win32.Agent.OOP
PCToolsTrojan.Generic
IkarusTrojan-Downloader.Win32.Agent
AVGDownloader.Generic9.CQU
PandaHacktool/Keymake

How to remove Application.Yek.1?

Application.Yek.1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment