Categories: Malware

Program:Win32/Ymacco.AA6A removal instruction

The Program:Win32/Ymacco.AA6A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Program:Win32/Ymacco.AA6A virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Program:Win32/Ymacco.AA6A?


File Info:
crc32: F52DDB31md5: 74f79438efc31ff1ecde30ce7a347280name: 74F79438EFC31FF1ECDE30CE7A347280.mlwsha1: 0d20f458e4aaa728bcae5bbc59d62be2c3551c51sha256: 6a46f7a85fb12e8d69e20a8e5d7d1903d0d397c28a90cf1cca4cd60d6a1d8f13sha512: 11cd0738f87ee4ccc23a4613d93ce92a084f0b50784d8a4f4aabcc51ae453754ff7bed3663be10ba0a20408033329d2a6f2ea941732b9c50b4d459280fa04edcssdeep: 24576:VUvxWKeX+4gT+xsJwoRVpQedzoAoBx4GWat40RhqaopK0yRY:6vxWKeuTT7RAWpGucqaopK0yqtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2020InternalName: PYG.dllFileVersion: 3, 0, 1, 1035CompanyName: x98d8x4e91x9601x8bbax575bx5b98x65b9x51fax54c1Comments: Www.ChinaPYG.CoMProductName: PYGProductVersion: 3, 0, 1, 1035FileDescription: Baymax Patcher ToolsOriginalFilename: PYG.dllTranslation: 0x0804 0x04b0

Program:Win32/Ymacco.AA6A also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Application.Hacktool.208
Cylance	Unsafe
Zillya	Tool.Patcher.Win32.32884
Sangfor	Riskware.Win32.Ymacco.AA6A
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	HackTool:Win32/Patcher.9be7a843
K7GW	Unwanted-Program ( 005405361 )
K7AntiVirus	Unwanted-Program ( 005405361 )
Cyren	W32/Injector.AFN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/HackTool.Patcher.DZ potentially unsafe
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Application.Hacktool.208
SUPERAntiSpyware	Trojan.Agent/Gen-Johnnie
MicroWorld-eScan	Gen:Variant.Application.Hacktool.208
Ad-Aware	Gen:Variant.Application.Hacktool.208
Sophos	Generic PUA AN (PUA)
BitDefenderTheta	Gen:NN.ZedlaF.34670.@K8@aCC!ljmj
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.fc
FireEye	Generic.mg.74f79438efc31ff1
Emsisoft	Gen:Variant.Application.Hacktool.208 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Program:Win32/Ymacco.AA6A
Gridinsoft	Hack.Win32.Patcher.oa!s6
AegisLab	Riskware.Win32.Malicious.1!c
GData	Gen:Variant.Application.Hacktool.208
AhnLab-V3	Malware/Win32.RL_Generic.R357895
McAfee	GenericRXLI-GW!74F79438EFC3
MAX	malware (ai score=71)
Malwarebytes	Malware.AI.2184529585
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R03BC0PCV21
Rising	PUA.Vigua!8.10186 (RDMK:cmRtazp0myuaqZlK8VioJj7/Q8Te)
MaxSecure	Trojan.Malware.104008301.susgen
Fortinet	Riskware/Generic_PUA_AN
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HgkASRUA