Categories: Malware

What is “Program:Win32/Ymacco.AABD”?

The Program:Win32/Ymacco.AABD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Program:Win32/Ymacco.AABD virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Program:Win32/Ymacco.AABD?


File Info:
crc32: BEBCDF5Amd5: 6645cc498ad7f7d998a3dd6c228cfe1fname: 6645CC498AD7F7D998A3DD6C228CFE1F.mlwsha1: b0cbecad1b3a6b9730661381410ab618c86e0420sha256: bd6a2ba4a7046f45404dd8c55990b44c66da4881fb431874bb07dc9268b30799sha512: 508c37c2f3919dbd198b5914b384cd413f0fbf05ae0be65db5cb795c06121001512b8b6b91cfb06f86f0a1916ac826101844280e1d414ed9ad8e500281b1afa8ssdeep: 768:dBZtjAP9HuXBZ643XuE4y56ySsq0FnxNicNTWgGZY9IENjjTY1V58qUD:dBZCc/rXDcyQ0FX5Qg2YVXTY1VaqUDtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

Program:Win32/Ymacco.AABD also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Gen:Variant.Strictor.252131
McAfee	RDN/Ransom
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Strictor.252131
K7GW	Riskware ( 0040eff71 )
BitDefenderTheta	Gen:NN.ZelphiF.34658.dmGfaCVCvAfc
Cyren	W32/Trojan.PEWI-5186
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Filecoder.OES
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Delf.sq
Alibaba	Ransom:Win32/BadJoke.3a91a4af
ViRobot	Trojan.Win32.Z.Zusy.54784.BB
AegisLab	Trojan.Win32.Delf.j!c
Rising	Malware.Undefined!8.C (TFE:5:GTR5N3WIifT)
Ad-Aware	Gen:Variant.Strictor.252131
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Delf.Agent.hopmj
DrWeb	Trojan.Encoder.33260
TrendMicro	Ransom_Delf.R06EC0WKU20
McAfee-GW-Edition	BehavesLike.Win32.Dropper.qc
FireEye	Generic.mg.6645cc498ad7f7d9
Emsisoft	Gen:Variant.Strictor.252131 (B)
Ikarus	Trojan.BadJoke.FakeKAV
Jiangmin	Trojan/FormatC.fs
MaxSecure	Trojan.Malware.300983.susgen
Avira	TR/Delf.Agent.hopmj
MAX	malware (ai score=89)
Microsoft	Program:Win32/Ymacco.AABD
Arcabit	Trojan.Strictor.D3D8E3
ZoneAlarm	Trojan-Ransom.Win32.Delf.sq
GData	Gen:Variant.Strictor.252131
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Strictor.252131
Malwarebytes	Ransom.Erica
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_Delf.R06EC0WKU20
Fortinet	PossibleThreat.MU
AVG	Win32:MdeClass
Paloalto	generic.ml
Qihoo-360	Generic/HEUR/QVM11.1.8BAA.Malware.Gen