Trojan.Ymacco (file analysis)

The Trojan.Ymacco is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Ymacco virus can do?

Injection (inter-process)
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Ymacco?


File Info:
crc32: FBDDD630
md5: a32aefef2543e725f6a52af637cf4571
name: tmp4u3bzi2d
sha1: 92daeb6868db1c2d6f275dd8ea01d8fb24c15ce4
sha256: 66f354163032c359f3f3efebb86f56743ccf6656d16fd63eb6ae07b36042ce90
sha512: e3b8e9b5cc21b90eb7fe3df6745a4ef9ad3ca8db04bd90d8ca3118b3bd4e5f41c47ed9ad9612dfc39ddf475d3d597268f3d21de814d2406266aa8c699f65ba4f
ssdeep: 24576:MTdonrt3RcbvooBBHp77vLKbBr9tR8G+IiC7srnFQYc+ebBxGH:MT+nrtqk6HlaBF8G+IDSn6xBY
type: 7-zip archive data, version 0.4

Version Info:
0: [No Data]

Trojan.Ymacco also known as:

MicroWorld-eScan	Trojan.GenericKD.43371585
CAT-QuickHeal	Trojan.Multi
Malwarebytes	Trojan.Dropper.SFX
AegisLab	Trojan.Win32.Agent.4!e
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Invincea	heuristic
Symantec	Trojan.Gen.NPE
ESET-NOD32	RAR/Agent.DD
TrendMicro-HouseCall	Trojan.AutoIt.PREDATOR.USXVPFF20
Avast	Other:Malware-gen [Trj]
Kaspersky	HEUR:Trojan-Dropper.Win32.Generic
BitDefender	Trojan.GenericKD.43371585
Rising	Trojan.Ymacco!8.11BE1 (CLOUD)
Ad-Aware	Trojan.GenericKD.43371585
Emsisoft	Trojan.GenericKD.43371585 (B)
F-Secure	Trojan.TR/Agent.yfrub
TrendMicro	Trojan.AutoIt.PREDATOR.USXVPFF20
FireEye	Trojan.GenericKD.43371585
Sophos	Mal/MalitRar-I
Cyren	W32/Trojan.ODRX-0142
Avira	PO11032020147.exe
MAX	malware (ai score=85)
Arcabit	Trojan.Generic.D295CC41
ZoneAlarm	HEUR:Trojan-Dropper.Win32.Generic
Microsoft	Trojan:Win32/Ymacco.AA35
Cynet	Malicious (score: 85)
ALYac	Trojan.GenericKD.34054529
VBA32	Trojan.Ymacco
Zoner	Probably Heur.RARAutorun
Tencent	Win32.Trojan-dropper.Generic.Ljju
Ikarus	Trojan.Autoit
MaxSecure	Trojan.Malware.300983.susgen
GData	Trojan.GenericKD.43371585
AVG	Other:Malware-gen [Trj]

How to remove Trojan.Ymacco?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Ymacco (file analysis)