Program:Win32/Ymacco.AA92 (file analysis)

The Program:Win32/Ymacco.AA92 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Program:Win32/Ymacco.AA92 virus can do?

Creates RWX memory
Unconventionial language used in binary resources: Russian
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Program:Win32/Ymacco.AA92?


File Info:
crc32: 17287B91
md5: 7a51d203428007a7720c550af90a8f7a
name: 7A51D203428007A7720C550AF90A8F7A.mlw
sha1: 3a4c83646698e26ed5baa8b84c51df903f51b1e5
sha256: 92d4f6588cb16390050ed95d26d9ccdc57a6315e250b918a0aad2e81e32b40fe
sha512: 8d8b24ec91a460ad01f584cf65c6b19a178c6dafd542cfb95c2567842daf10b3325ac910be7a2cf8a4514fa60c5b00d0b6a65a9b155d2fa7472e87f033173a93
ssdeep: 12288:r+m3OFryBn0Qjb8glLW/BhbWWOlDAq4Xfoa:KKOcBn02DgfbZqQfo
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Program:Win32/Ymacco.AA92 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Adware.Win32.Generic.2!c
Cynet	Malicious (score: 99)
ALYac	Trojan.GenericKD.37996003
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.1120261
Sangfor	Trojan.Win32.Wacapew.C!ml
Alibaba	AdWare:Win32/DealPly.c2737b58
Cyren	W32/DealPly.BJ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
BitDefender	Trojan.GenericKD.37996003
NANO-Antivirus	Riskware.Win32.Mlw.hoqsci
ViRobot	Trojan.Win32.Z.Crypt.438272.B
MicroWorld-eScan	Trojan.GenericKD.37996003
Ad-Aware	Trojan.GenericKD.37996003
Sophos	Generic PUA DK (PUA)
Comodo	ApplicUnwnt@#3c1a0dkjodktr
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PKA21
McAfee-GW-Edition	BehavesLike.Win32.Worm.gh
FireEye	Trojan.GenericKD.37996003
Emsisoft	Trojan.GenericKD.37996003 (B)
Avira	TR/Crypt.ZPACK.Gen
Microsoft	Program:Win32/Ymacco.AA92
GData	Trojan.GenericKD.37996003
McAfee	Generic.bop
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Wacatac
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PKA21
Rising	Trojan.Generic@ML.92 (RDML:rvhblkTGFJjJDmuSBbsc8A)
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Adware/Generic
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Program:Win32/Ymacco.AA92?

Program:Win32/Ymacco.AA92 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X