Trojan

Trojan:Win32/Ymacco.AA1B removal guide

Malware Removal

The Trojan:Win32/Ymacco.AA1B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Ymacco.AA1B virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan:Win32/Ymacco.AA1B?


File Info:

crc32: 69F560F6
md5: 6392822bfcc7800439042955561c847d
name: upload_file
sha1: 0147369f76be3882cbc25f7de3e55928ecb535b4
sha256: 1b1b79aaf799bcc38f1946bf7f38b31099fc8cf7f06aa3d30c29d5f8d24715f6
sha512: 31b7bbedb21ad0fa0c2fe786890c09f402cba2739c80356466ef0c81dedd918b06b970fe455e427c0d075f7440272008d6905a7a4fcc7c5a8a04e2179b2f1449
ssdeep: 3072:AVpUpgwxg53VnkjZ5xxIBHa5xRHmzpN5ZM9AOdIdZgKOxKMVA4Jhqc+xymc:A+E3Vy/PIBHa5jeTX0IdfMVxJhCxy
type: PE32 executable (native) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Ymacco.AA1B also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebBackDoor.Darkshell.549
MicroWorld-eScanGen:Variant.Symmi.95706
ALYacGen:Variant.Symmi.95706
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0056413b1 )
BitDefenderGen:Variant.Symmi.95706
K7GWTrojan ( 0056413b1 )
CrowdStrikewin/malicious_confidence_100% (W)
Invinceaheuristic
CyrenW32/Darkshell.A.gen!Eldorado
SymantecTrojan.Gen.MBT
TrendMicro-HouseCallTROJ_GEN.R002C0PHM20
Paloaltogeneric.ml
ClamAVWin.Malware.Agen-6856520-0
KasperskyHEUR:Trojan.Win32.Generic
AlibabaPacked:Win32/VMProtect.d05d3671
NANO-AntivirusVirus.Win32.Gen.ccmw
AegisLabTrojan.Win32.Generic.4!c
TencentWin32.Trojan.Gen.Wofy
Ad-AwareGen:Variant.Symmi.95706
Comodo.UnclassifiedMalware@0
F-SecureHeuristic.HEUR/AGEN.1128512
TrendMicroTROJ_GEN.R002C0PHM20
SophosMal/VMProtBad-A
SentinelOneDFI – Malicious PE
AviraHEUR/AGEN.1128512
MicrosoftTrojan:Win32/Ymacco.AA1B
ArcabitTrojan.Symmi.D175DA
SUPERAntiSpywareTrojan.Agent/Gen-Emotet
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Symmi.95706
CynetMalicious (score: 100)
AhnLab-V3Malware/Gen.Generic.C2672487
Acronissuspicious
McAfeeGenericRXGU-CE!6392822BFCC7
MAXmalware (ai score=83)
MalwarebytesTrojan.MalPack
APEXMalicious
ESET-NOD32a variant of Win32/Packed.VMProtect.GD
RisingTrojan.Ditertag!8.F693 (TFE:5:GEZgJhP8VZT)
IkarusTrojan.Rootkit
FortinetW32/Generic.RXGI!tr
AVGWin32:Darkshell-A [Trj]
Cybereasonmalicious.bfcc78
Qihoo-360Win32/Trojan.386

How to remove Trojan:Win32/Ymacco.AA1B?

Trojan:Win32/Ymacco.AA1B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment