Ransom Trojan

Should I remove “Trojan.Ransom.Yatron.A”?

Malware Removal

The Trojan.Ransom.Yatron.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Ransom.Yatron.A virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Trojan.Ransom.Yatron.A?


File Info:

crc32: 7D6BA4D5
md5: 96e08acb68b81da0bf4985eae10ebde2
name: 96E08ACB68B81DA0BF4985EAE10EBDE2.mlw
sha1: 25cb429bf1272c3bc1fcb697fd70aba5c236c14f
sha256: 7910b3f3a04644d12b8e656aa4934c59a4e3083a2a9c476bf752dc54192c255b
sha512: 394dc4699af14c936f09c591b83e4b456eb340405b8b1180a3086af21e1fcb0d5e5bf64471fd6b1fc7ffdb3badc850e03df62bda47d53589149de98e4af72144
ssdeep: 6144:ZDKW1Lgbdl0TBBvjc/BcQBd1ohbxaOlgPvLjyHtBD2UauKqr8Mtt8aybuG8J:Jh1Lk70Tnvjca8l/+BDGuAMtt8+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2019
Assembly Version: 1.0.0.0
InternalName: stub j2.exe
FileVersion: 1.0.0.0
ProductName: Yatron
ProductVersion: 1.0.0.0
FileDescription: Yatron
OriginalFilename: stub j2.exe

Trojan.Ransom.Yatron.A also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.MSIL.Yatron.j!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen7.30138
CynetMalicious (score: 100)
ALYacTrojan.Ransom.Yatron
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Yatron.dea4b1ad
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.b68b81
CyrenW32/Trojan.XOFX-7945
SymantecTrojan Horse
ESET-NOD32a variant of Generik.JKXMRAK
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Ransomware.Yatron-6899151-0
KasperskyTrojan-Ransom.MSIL.Yatron.a
BitDefenderTrojan.Ransom.Yatron.A
NANO-AntivirusTrojan.Win32.Mlw.fnmsjp
ViRobotTrojan.Win32.S.Yatron.447676
MicroWorld-eScanTrojan.Ransom.Yatron.A
TencentWin32.Trojan.Raas.Auto
Ad-AwareTrojan.Ransom.Yatron.A
SophosMal/Generic-R + Troj/Ransom-FHB
ComodoMalware@#4970z36vhq70
BitDefenderThetaGen:NN.ZexaF.34170.Bq1@aaAmFCm
ZillyaTrojan.Generic.Win32.663962
TrendMicroRansom.Win32.YATRON.THCABAI
EmsisoftTrojan.Ransom.Yatron.A (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Ransom.Yatron
AviraWORM/Autorun.ujryc
Antiy-AVLTrojan/Generic.ASMalwS.2AC6953
GDataTrojan.Ransom.Yatron.A
TACHYONRansom/W32.Yatron.447676
AhnLab-V3Trojan/Win32.Generic.C3088069
Acronissuspicious
McAfeeTrojan-Ransom.c
MAXmalware (ai score=100)
VBA32Trojan.Casdet
PandaTrj/CI.A
TrendMicro-HouseCallRansom.Win32.YATRON.THCABAI
RisingRansom.Yatron!1.B672 (CLASSIC)
YandexTrojan.Agent!xx/9Or7McL4
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Yatron.THCABAI!tr.ransom
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Ransom.Yatron.A?

Trojan.Ransom.Yatron.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment