Program:Win32/Ymacco.AADC removal tips

The Program:Win32/Ymacco.AADC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Program:Win32/Ymacco.AADC virus can do?

A process created a hidden window
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Program:Win32/Ymacco.AADC?


File Info:
crc32: ECD129AE
md5: 0e4f099f4bebc88b440d1d0b29070e75
name: 0E4F099F4BEBC88B440D1D0B29070E75.mlw
sha1: 5ca69c0c60cb66cd59defa9e79ce2c75ab082898
sha256: dccac50de5c9c78b598081b3327c788f2345f7dbbf70f2e891706f98724854ae
sha512: 51a67d8ab2284d31cc17761b391a53a9a0ed4b76055a1faf22fbfb0a8dd4eb79319dbd6df624cc8af5e59a3d0578bb8dcaf8a57d9ac137cf690e4e1a1cabb197
ssdeep: 6144:R9+BzPb5i8CGJTWZ3qxpqqx502Dkw5PWqf2aLw7BQmgZ+N5229XhmKx9OTBQ4ir:Z8FJSss7MW79tNNzL1jOT8UhBR
type: MS-DOS executable, MZ for MS-DOS

Version Info:
Translation: 0x0000 0x04b0

Program:Win32/Ymacco.AADC also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Hacktool.Win32.KMSAuto.tpPy
Elastic	malicious (high confidence)
McAfee	Artemis!0E4F099F4BEB
Cylance	Unsafe
Sangfor	Riskware.Win32.Wacapew.C
Alibaba	Trojan:Win32/AutoKMS.76231bc3
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.f4bebc
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:WrongInf-A [Susp]
Cynet	Malicious (score: 100)
BitDefender	Application.KMSTool.B
MicroWorld-eScan	Application.KMSTool.B
Tencent	Malware.Win32.Gencirc.1168f867
Ad-Aware	Application.KMSTool.B
Sophos	Generic PUA FM (PUA)
Comodo	Malware@#3s3tzp3ipg64c
BitDefenderTheta	Gen:NN.ZexaF.34170.FuW@a0R040oi
McAfee-GW-Edition	BehavesLike.Win32.Ramnit.hh
FireEye	Generic.mg.0e4f099f4bebc88b
Emsisoft	Application.KMSTool.B (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	HackTool.KMSAuto.dj
Avira	TR/Patched.Ren.Gen7
Antiy-AVL	Trojan/Generic.ASMalwS.28252D4
Microsoft	Program:Win32/Ymacco.AADC
Arcabit	Application.KMSTool.B
GData	Application.KMSTool.B
TACHYON	Trojan/W32.KMSAuto.512512
Acronis	suspicious
VBA32	BScope.Trojan.Wacatac
MAX	malware (ai score=76)
Malwarebytes	Malware.AI.4169025037
Rising	Trojan.Generic@ML.99 (RDMK:0GOoC6oz1xa6n7MAV/e40g)
Ikarus	HackTool.Win32.AutoKMS
AVG	Win32:WrongInf-A [Susp]

How to remove Program:Win32/Ymacco.AADC?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Program:Win32/Ymacco.AADC removal tips