Program:Win32/Ymacco.AA36 information

The Program:Win32/Ymacco.AA36 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Program:Win32/Ymacco.AA36 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
A process attempted to delay the analysis task by a long amount of time.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Program:Win32/Ymacco.AA36?


File Info:
crc32: AC4E92C6
md5: da158ba255a9eb2fb7f76bf048bb8d1c
name: DA158BA255A9EB2FB7F76BF048BB8D1C.mlw
sha1: 8512242a199f0813649a74d1d88edb2b17422a36
sha256: c70e8622be15c0b05316a2b78b4d7a50506cef23bc50b2d145918daf07552c0a
sha512: 5c071d0e53ef7610948859f388b3356b25e19ffd1db5e5aac3057aa8f709abf1aa857db7b6a415d6df65b539a4cbb74f37b9c799efaa700446c14588e74c6f25
ssdeep: 3072:tO+b0Q1QZQ6QuQP1pNOtcR1sGFHlx5QN0SGrgv+iwTTH9ZZSTPCEyS+Vja8ziry:txD1bOaR1Hbg0vr2+3TZSDCFZW8u2
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Tail noise Corporation. All rights reserved. Throw talk
InternalName: Final Thing
FileVersion: 1.1.0.806
CompanyName: Tail noise Corporation
ProductName: Tail noisexae Coverbreakxae 
ProductVersion: 1.1.0.806
FileDescription: Tail noise Coverbreak
Round: Head had
OriginalFilename: Group.dll
Translation: 0x0409 0x04b0

Program:Win32/Ymacco.AA36 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Gozi.770
MicroWorld-eScan	Trojan.GenericKD.35533102
Qihoo-360	Generic/Trojan.Dropper.1b1
McAfee	Trojan-FRGC!DA158BA255A9
Malwarebytes	Trojan.Ursnif
AegisLab	Trojan.Win32.Generic.4!c
BitDefender	Trojan.GenericKD.35533102
Arcabit	Trojan.Generic.D21E312E
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Agent.gen
Rising	Trojan.Generic@ML.89 (RDML:O2gPtq6Y0sQ7cYatexAi0A)
Ad-Aware	Trojan.GenericKD.35533102
Sophos	ML/PE-A
F-Secure	Trojan.TR/AD.UrsnifDropper.hcfxt
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.da158ba255a9eb2f
Emsisoft	Trojan.GenericKD.35533102 (B)
Avira	TR/AD.UrsnifDropper.hcfxt
Microsoft	Program:Win32/Ymacco.AA36
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Trojan.GenericKD.35533102
Cynet	Malicious (score: 90)
Acronis	suspicious
MAX	malware (ai score=81)
Cylance	Unsafe
Panda	Trj/Genetic.gen
APEX	Malicious
ESET-NOD32	a variant of Win32/Kryptik.HHYT
Fortinet	W32/PhotoDlder.JREV!tr
AVG	FileRepMalware

How to remove Program:Win32/Ymacco.AA36?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Program:Win32/Ymacco.AA36 information