Trojan

About “Trojan.Win32.Yakes.wvjq” infection

Malware Removal

The Trojan.Win32.Yakes.wvjq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Yakes.wvjq virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs

How to determine Trojan.Win32.Yakes.wvjq?


File Info:

crc32: AE55AB4B
md5: 3d110ee67d6cbac270cb0539bdba94ec
name: 3D110EE67D6CBAC270CB0539BDBA94EC.mlw
sha1: f4a4d2f9dc5b5b96fd1d84d7bd03f5d109834a77
sha256: 7d07c0f410ee6ea461eda98650ddf850ef8ce49340e80ce7bced050db763d94d
sha512: 9513d99063ea6fcdd817aad04feb769294635e25ed6885da18aac4ef8e38344638108e0bf946d1042fea4823807495c896a7a51d109dba68aa45d92c39df48b9
ssdeep: 12288:5WFlCHLNnKDACGUGI9a2+pv0nGV6N0fLlB+BsybbC0:5elCHP5UGIQ6e5lB+BsG
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: (C) 2007-2015
InternalName: Cares
FileVersion: 7.4.81.3
CompanyName: PassMark Software
FileDescription: Substring 256bit Task
LegalTrademarks: (C) 2007-2015
Comments: Substring 256bit Task
ProductName: Cares
ProductVersion: 7.4.81.3
PrivateBuild: 7.4.81.3
OriginalFilename: Cares.exe
Translation: 0x0409 0x04b0

Trojan.Win32.Yakes.wvjq also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0052daff1 )
Elasticmalicious (high confidence)
DrWebTrojan.Siggen7.56068
CynetMalicious (score: 100)
McAfeeRansom-O.e
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.125399
SangforTrojan.Win32.Yakes.wvjq
CrowdStrikewin/malicious_confidence_70% (D)
AlibabaTrojan:Win32/Yakes.83a60053
K7GWTrojan ( 0052daff1 )
Cybereasonmalicious.67d6cb
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Filecoder.FS
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Yakes.wvjq
BitDefenderGen:Variant.Ransom.Scarab.43
NANO-AntivirusTrojan.Win32.Yakes.fiacpj
MicroWorld-eScanGen:Variant.Ransom.Scarab.43
TencentMalware.Win32.Gencirc.114d0490
Ad-AwareGen:Variant.Ransom.Scarab.43
ComodoMalware@#15qyls5w0cgyh
BitDefenderThetaGen:NN.ZexaF.34722.DmKfaiZsrthi
TrendMicroRansom_SCARAB.THIOEAH
McAfee-GW-EditionBehavesLike.Win32.Dropper.gc
FireEyeGeneric.mg.3d110ee67d6cbac2
EmsisoftGen:Variant.Ransom.Scarab.43 (B)
JiangminTrojan.Yakes.adzt
AviraHEUR/AGEN.1126114
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.27142ED
MicrosoftTrojan:Win32/Skeeyah.B!rfn
AegisLabTrojan.Win32.Yakes.4!c
GDataGen:Variant.Ransom.Scarab.43
AhnLab-V3Malware/Win32.Generic.C2633200
Acronissuspicious
VBA32BScope.TrojanPSW.Azorult
MAXmalware (ai score=100)
MalwarebytesMalware.AI.1901226744
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_SCARAB.THIOEAH
YandexTrojan.Yakes!Keh8xLlkJao
IkarusTrojan.Crypt
FortinetW32/Filecoder.FS!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Win32.Yakes.wvjq?

Trojan.Win32.Yakes.wvjq removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment