Trojan

What is “Trojan:Win32/Ymacco.AA81”?

Malware Removal

The Trojan:Win32/Ymacco.AA81 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/Ymacco.AA81 virus can do?

  • The binary likely contains encrypted or compressed data.

How to determine Trojan:Win32/Ymacco.AA81?



File Info:

crc32: C5F49CDE
md5: 4215d63c60b9c8fe921b82cbccbdf52c
name: wermgr.exe
sha1: d8537ad65a931c20ebf21cd3a30c9d7d658d8d8d
sha256: 8b623aab230172b8aefa422d9fa9fd14350cded7be6f3c8ee947d4258cc1fdc8
sha512: 3afd2ad3718eb9d23d6e11570ff82fe9615c81d44f303355dc42fca0a9e144abea76953129996f1490db491a18ce0252bce1dd7d413896ff447e81c04627a3c0
ssdeep: 6144:kQLhGUxqKlEyiijDTxSml/VJyB60OHyLC7v:jLhcKl7Px9c2Hyw
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: WerMgr
FileVersion: 10.0.17763.802 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.17763.802
FileDescription: Windows Problem Reporting
OriginalFilename: WerMgr
Translation: 0x0409 0x04b0

Trojan:Win32/Ymacco.AA81 also known as:

MicroWorld-eScanTrojan.GenericKD.43568458
FireEyeGeneric.mg.4215d63c60b9c8fe
McAfeeArtemis!4215D63C60B9
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
BitDefenderTrojan.GenericKD.43568458
K7GWTrojan ( 0054f1b91 )
Cybereasonmalicious.65a931
TrendMicroPUA.Win32.Caypnamer.USXVPGV20
BitDefenderThetaGen:NN.ZemsilF.34144.om0@aeg26uni
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallPUA.Win32.Caypnamer.USXVPGV20
AvastWin32:Trojan-gen
GDataTrojan.GenericKD.43568458
KasperskyHEUR:Trojan-Banker.MSIL.ClipBanker.gen
AlibabaTrojanBanker:MSIL/ClipBanker.765c2cdc
AegisLabTrojan.MSIL.ClipBanker.7!c
TencentMsil.Trojan-banker.Clipbanker.Oyyf
Endgamemalicious (high confidence)
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1109355
Invinceaheuristic
EmsisoftTrojan.GenericKD.43568458 (B)
SentinelOneDFI – Malicious PE
AviraHEUR/AGEN.1109355
ArcabitTrojan.Generic.D298CD4A
ZoneAlarmHEUR:Trojan-Banker.MSIL.ClipBanker.gen
MicrosoftTrojan:Win32/Ymacco.AA81
CynetMalicious (score: 85)
ALYacTrojan.GenericKD.43568458
MAXmalware (ai score=83)
Ad-AwareTrojan.GenericKD.43568458
MalwarebytesSpyware.PasswordStealer
PandaTrj/GdSda.A
APEXMalicious
ESET-NOD32a variant of MSIL/ClipBanker.JI
RisingTrojan.ClipBanker!8.5FB (CLOUD)
IkarusPUA.Generic
eGambitUnsafe.AI_Score_99%
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Generic/Trojan.f6f

How to remove Trojan:Win32/Ymacco.AA81?

Trojan:Win32/Ymacco.AA81 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment