Trojan:Win32/Ymacco.AA0B malicious file

The Trojan:Win32/Ymacco.AA0B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Ymacco.AA0B virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/Ymacco.AA0B?


File Info:
crc32: AD03730F
md5: 2fa798e88968f8b0c5b80fe9d002f00b
name: tmp1g5woapx
sha1: 683bf067b253c630b1a550c422d9d61717348c41
sha256: 69617fff1691698a2363064f1a5b42c5cc677e617cd60719b649adfd7f073204
sha512: e3e4b2c74f3a1ebca8d940ffb6081bcbe794bd6e7920968bf7f72e52a768804310b0c01afc75aec46c937ca2b1c954475918c9919e7d7c2b9895138146f4c367
ssdeep: 24576:AyITjLox0UG6+Dn302pqa5ugHd+Xfyze9LV8eoSg1vpADshONKNi:Ay2u0U3i302pcgHd+X6zawvpip
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName: DRx415x410x41c                                                       
Comments: This installation was built with Inno Setup.
ProductName: DRx415x410x41c                                                       
ProductVersion: 7.45                                              
FileDescription: DRx415x410x41c Setup                                                 
Translation: 0x0000 0x04b0

Trojan:Win32/Ymacco.AA0B also known as:

MicroWorld-eScan	Trojan.GenericKD.34058890
FireEye	Trojan.GenericKD.34058890
McAfee	Artemis!2FA798E88968
AegisLab	Trojan.Win32.Generic.4!c
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.34058890
K7GW	Riskware ( 0040eff71 )
Symantec	SMG.Heur!gen
APEX	Malicious
Avast	Win32:Malware-gen
GData	Trojan.GenericKD.34058890
Kaspersky	Trojan.Win32.Propagate.ofi
Tencent	Win32.Trojan.Propagate.Hvjr
Emsisoft	Trojan.GenericKD.34058890 (B)
F-Secure	Trojan.TR/AD.Dofoil.qkzga
Sophos	Mal/Generic-S
Ikarus	Trojan.Dofoil
Jiangmin	Trojan.Propagate.bwd
Avira	TR/AD.Dofoil.qkzga
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Ymacco.AA0B
Arcabit	Trojan.Generic.D207B28A
ZoneAlarm	Trojan.Win32.Propagate.ofi
Malwarebytes	Trojan.Propagate
TrendMicro-HouseCall	TROJ_GEN.R002H07FN20
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Propagate.OFI!tr
BitDefenderTheta	Gen:NN.ZexaF.34130.oq0@ae3djJnG
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Win32/Trojan.e16

How to remove Trojan:Win32/Ymacco.AA0B?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan:Win32/Ymacco.AA0B malicious file