TrojanClicker:Win32/Yabector malicious file

The TrojanClicker:Win32/Yabector is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanClicker:Win32/Yabector virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid

How to determine TrojanClicker:Win32/Yabector?


File Info:
name: 557B7643C467D72E59E9.mlw
path: /opt/CAPEv2/storage/binaries/c4f694edae0656c3dd55faa1312c129c214c6815c7ae57c8fd29f7a618bcf139
crc32: FD19CCA8
md5: 557b7643c467d72e59e9598f185e5fc9
sha1: 3c38f36ef9b9f1dbdae2b37729da8af918be5562
sha256: c4f694edae0656c3dd55faa1312c129c214c6815c7ae57c8fd29f7a618bcf139
sha512: f37c2d1f3b23229bad117866da648b5cd03d6cd40f0add3e39250a4c39ad71ebcac1bfa7dac8fafe56ccae88e521bf30fc3d0e4068ea8c445a7f7677596e64ee
ssdeep: 49152:ArhACte6rkYV8Wou7/l26jTWMARG+PmEg3fK36uIShAqnBUbKDzscvrfKMv7ER:ArqCnYYV8vaTRvEyK3R1qqWbKtrKM2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12DF533B203E5D8E6EA5854319F1B8671F9BCFE81539502172B323F9FED73690AA84341
sha3_384: a020f4bfcf649ef2ee7f79b6c4454847eb7e30a2e4348bf5ffed14b89029ed452b9d6c4a4288a0a56911ce0d9d235f22
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2007-11-17 14:35:28

Version Info:
0: [No Data]

TrojanClicker:Win32/Yabector also known as:

Bkav	W32.Common.375AEC40
Lionic	Adware.Win32.Yabector.2!c
MicroWorld-eScan	Dropped:Adware.Yabector.B
FireEye	Dropped:Adware.Yabector.B
CAT-QuickHeal	TrojanClicker.Yabector
Skyhigh	AdClicker-CW.b
McAfee	Artemis!557B7643C467
Cylance	unsafe
Sangfor	Adware.Win32.Yabector.Vxv3
CrowdStrike	win/grayware_confidence_60% (D)
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Adware.ADON potentially unwanted
BitDefender	Dropped:Adware.Yabector.B
Avast	Win32:Yabector [Adw]
Sophos	EbayShortcuts (PUA)
F-Secure	Program.APPL/Yabector.Gen5
VIPRE	Dropped:Adware.Yabector.B
Emsisoft	Dropped:Adware.Yabector.B (B)
GData	Dropped:Adware.Yabector.B
Webroot	W32.Malware.Gen
Avira	APPL/Yabector.Gen5
Antiy-AVL	Trojan[Clicker]/Win32.Yabector
Xcitium	Malware@#3vm7j0qojkv8f
Arcabit	Adware.Yabector.B
ViRobot	Adware.Yabector.3346598.A
Microsoft	TrojanClicker:Win32/Yabector.gen
Cynet	Malicious (score: 100)
ALYac	Dropped:Adware.Yabector.B
MAX	malware (ai score=89)
Malwarebytes	Malware.AI.3951641564
Panda	PUP/Generic
Rising	Trojan.Generic@AI.81 (RDML:P0cXrJu8T2/GEqzR4wEm6A)
Yandex	Trojan.GenAsa!p0lipqzWUZ8
Fortinet	Adware/PUP
AVG	Win32:Yabector [Adw]
DeepInstinct	MALICIOUS

How to remove TrojanClicker:Win32/Yabector?

TrojanClicker:Win32/Yabector removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X