Trojan

How to remove “Trojan.Win32.Yakes.aaiwh”?

Malware Removal

The Trojan.Win32.Yakes.aaiwh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Yakes.aaiwh virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Mimics the system’s user agent string for its own requests
  • Possible date expiration check, exits too soon after checking local time
  • A process attempted to delay the analysis task.
  • A named pipe was used for inter-process communication
  • Expresses interest in specific running processes
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • A process created a hidden window
  • Drops a binary and executes it
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

www.ip-adress.com

How to determine Trojan.Win32.Yakes.aaiwh?


File Info:

crc32: 6AEE34D9
md5: bf70d8a5996ec59d430de02adf38bada
name: 555555.png
sha1: 90f75a4f0322040cfcbc23d56286fcbb8cd1820f
sha256: 35b4761dd5ed6b1ebbd8de83f0f3867926ed1271e32fb3bbc97618008b1d6fc5
sha512: b359be72199d89ea1a77d939847da2cc05814aa7a8a7b5734a07bee77d290d43c4d6b085f52a1df296d3ef898da731300149bbfb075418901248b03154b45fad
ssdeep: 12288:CmJnJHUrcxNxIxfxNxnxNxIWxNxsyRxNxRxNx0xNx6gtKO2JO9:B5cJkMO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Win32.Yakes.aaiwh also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.43665099
CAT-QuickHealTrojan.IGENERIC
McAfeeW32/PinkSbot-HA!BF70D8A5996E
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabHacktool.Win32.Krap.lKMc
SangforMalware
K7AntiVirusRiskware ( 0049f6ae1 )
BitDefenderTrojan.GenericKD.43665099
K7GWRiskware ( 0049f6ae1 )
Cybereasonmalicious.f03220
TrendMicroBackdoor.Win32.QAKBOT.SMF
F-ProtW32/Qbot.S.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HFNH
APEXMalicious
AvastWin32:DangerousSig [Trj]
KasperskyTrojan.Win32.Yakes.aaiwh
AlibabaTrojan:Win32/Yakes.e854a25e
Ad-AwareTrojan.GenericKD.43665099
Comodo.UnclassifiedMalware@0
F-SecureTrojan.TR/Crypt.Agent.jylwx
DrWebBackDoor.Qbot.538
Invinceaheuristic
FortinetW32/Cridex.VHO!tr
FireEyeGeneric.mg.bf70d8a5996ec59d
SophosMal/EncPk-APV
IkarusTrojan.Win32.Crypt
CyrenW32/Qbot.S.gen!Eldorado
JiangminTrojan.Zenpak.cui
MaxSecureTrojan.UDSTrojan.WIN32.Qbot_197514
AviraTR/Crypt.Agent.jylwx
MAXmalware (ai score=89)
Antiy-AVLGrayWare/Win32.Kryptik.ehls
ArcabitTrojan.Generic.D29A46CB
ZoneAlarmTrojan.Win32.Yakes.aaiwh
MicrosoftTrojan:Win32/Qakbot.VD!Cert
CynetMalicious (score: 100)
VBA32BScope.Trojan.Encoder
ALYacTrojan.GenericKD.43665099
PandaTrj/Genetic.gen
TrendMicro-HouseCallBackdoor.Win32.QAKBOT.SMF
RisingTrojan.Kryptik!8.8 (CLOUD)
SentinelOneDFI – Malicious PE
GDataTrojan.GenericKD.43665099
AVGWin32:DangerousSig [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (W)
Qihoo-360Generic/HEUR/QVM20.1.3FDB.Malware.Gen

How to remove Trojan.Win32.Yakes.aaiwh?

Trojan.Win32.Yakes.aaiwh removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment