Trojan

About “Trojan.Win32.Yakes.aayjw” infection

Malware Removal

The Trojan.Win32.Yakes.aayjw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Yakes.aayjw virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Yakes.aayjw?


File Info:

crc32: 16D598CD
md5: 32c1ce60ba186859dcb8aeaf3e1fc7c7
name: 32C1CE60BA186859DCB8AEAF3E1FC7C7.mlw
sha1: 49aaa3257d68f2b8f025690101f37582a9ef51be
sha256: b0616500e149c3fc92dbcd52c590e418fe9e499c26a37552266ad70d1e0fa5d0
sha512: 35bb838403e27d0fbfff020646632a25d6b7af8e230dba560b372b4a59af457dd9d4b5c320889834171f1cd91f379d95471fdb3b4ee1e0a5a760d6590c2f4d59
ssdeep: 3072:Od4Dcp/qdOUKcT1GpvO0nygcp0DvA/fxHbeXaUDwOvHvWM:nDBdOlG0nyg1DvwxgZ/v
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2018
InternalName: x2otfb
FileVersion: 7.2.5422.00
Full Version: 7.2.5_000-b00
CompanyName: Oracle Corporation
ProductName: Xhot(BM) Ltloehey YO 8
ProductVersion: 7.2.5422.00
FileDescription: Java(TM) Platform SE binary
OriginalFilename: x2otfb.dll
Translation: 0x0000 0x04b0

Trojan.Win32.Yakes.aayjw also known as:

Elasticmalicious (high confidence)
ALYacTrojan.GenericKDZ.74992
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HKSW
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Yakes.aayjw
BitDefenderTrojan.GenericKDZ.74992
MicroWorld-eScanTrojan.GenericKDZ.74992
Ad-AwareTrojan.GenericKDZ.74992
SophosML/PE-A + Mal/EncPk-APX
ComodoTrojWare.Win32.UMal.sfdzt@0
BitDefenderThetaGen:NN.ZedlaF.34688.ku8@au6av2
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0RE621
McAfee-GW-EditionRDN/Generic.grp
FireEyeGeneric.mg.32c1ce60ba186859
EmsisoftTrojan.GenericKDZ.74992 (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1142282
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Script/Phonzy.B!ml
ZoneAlarmTrojan.Win32.Yakes.aayjw
GDataTrojan.GenericKDZ.74992
Acronissuspicious
McAfeeArtemis!32C1CE60BA18
MAXmalware (ai score=84)
MalwarebytesTrojan.Dridex
TrendMicro-HouseCallTROJ_GEN.R002C0RE621
RisingTrojan.Kryptik!8.8 (RDMK:cmRtazqoYwb1D0/yMXPYktr6l6IU)
IkarusTrojan-Banker.Dridex
FortinetW32/EncPk.APX!tr
AVGWin32:Malware-gen

How to remove Trojan.Win32.Yakes.aayjw?

Trojan.Win32.Yakes.aayjw removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment