Trojan

About “Trojan:Win32/Ymacco.AA1F” infection

Malware Removal

The Trojan:Win32/Ymacco.AA1F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Ymacco.AA1F virus can do?

  • Unconventionial language used in binary resources: Norwegian (Bokmal)
  • The binary likely contains encrypted or compressed data.

How to determine Trojan:Win32/Ymacco.AA1F?


File Info:

crc32: FC6BEFA4
md5: 34a8c8acc0abf4335c3b51e9aea8efba
name: loader.exe
sha1: ec2ab90deaa2180e56536e7925c3c6b0f5769793
sha256: 1f84a2db33e98a5d5910712cd43435e60bbd70a2b978811541eb93f1d2763dad
sha512: ca5b769af823361e674c6df7d1c597d05f09301827662d296b35cc70139465b9568473dc87eeb0601f62b3c5523e39a432b6a9db2904ba934d158e52faba2134
ssdeep: 12288:i7CaPh6cMO80bBpc3vY/NGtJNvCxQcJ5S/FZ96turuqUqpCJMZjJDUSVv1MWZ3r:iGOFVKvCn6FZ96MZ/xZ3rJQs
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Ymacco.AA1F also known as:

BkavW32.AIDetectVM.malware2
MicroWorld-eScanGen:Variant.Razy.718421
FireEyeGen:Variant.Razy.718421
McAfeeGenericRXLA-ZN!34A8C8ACC0AB
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Zusy.4!c
SangforMalware
BitDefenderGen:Variant.Razy.718421
K7GWTrojan ( 00562e331 )
K7AntiVirusTrojan ( 00562e331 )
TrendMicroTROJ_GEN.R002C0PGE20
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
GDataGen:Variant.Razy.718421
AlibabaTrojan:Win32/Kryptik.19f49566
RisingTrojan.Kryptik!8.8 (CLOUD)
Ad-AwareGen:Variant.Razy.718421
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.Agent.qyfky
ZillyaTrojan.Kryptik.Win32.2184983
EmsisoftGen:Variant.Razy.718421 (B)
AviraTR/Crypt.Agent.qyfky
Antiy-AVLTrojan/Win32.Wacatac
Endgamemalicious (high confidence)
ArcabitTrojan.Razy.DAF655
MicrosoftTrojan:Win32/Ymacco.AA1F
AhnLab-V3Trojan/Win32.Kryptik.C4146358
MAXmalware (ai score=82)
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HCAD
TrendMicro-HouseCallTROJ_GEN.R002C0PGE20
IkarusTrojan.Win32.Inject
FortinetW32/Kryptik.HCAD!tr
AVGWin32:Trojan-gen
Qihoo-360Generic/Trojan.e40

How to remove Trojan:Win32/Ymacco.AA1F?

Trojan:Win32/Ymacco.AA1F removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment