Trojan:Win32/Ymacco.AACC malicious file

The Trojan:Win32/Ymacco.AACC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Ymacco.AACC virus can do?

Unconventionial binary language: Chinese (Simplified)

How to determine Trojan:Win32/Ymacco.AACC?


File Info:
crc32: 34CF6B8D
md5: 068d94a3319476c1ad4051f7b83b17ec
name: tmptsr4kbvl
sha1: 4b5d3aeba013225055ee0e949a8fb777fdc4f405
sha256: cc00ec37c2aa73b9e8992a8b7c64dfdde43abd4cf8456f71e29f475652437fdb
sha512: 46a9d479d2b4ca244bc13559ef5b7864ef70a0b75088d1f0a8c016a61d2f877f09819d8942e444f19b8a2304b56362f46429a09e4c0e5d62a7e88fe7c02fbcf9
ssdeep: 49152:wkoRGIrj2sNqJJT1PZXxJkjqNh85p2MEhnM5p2+Zlliht6+tw5:ToRGOqJrZXxmtp6M5p2slUc+y5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2009 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.                                        
InternalName: Setup                                        
FileVersion: 2.00.0000                                       
CompanyName: ActiveX                                                      
Internal Build Number: 94573                                        
ProductName: ActiveX                                              
ProductVersion: 2.00.0000                                   
FileDescription: Setup Launcher Unicode                                        
OriginalFilename: Setup.exe                                        
Translation: 0x0804 0x04b0

Trojan:Win32/Ymacco.AACC also known as:

Bkav	W32.HfsAutoB.
MicroWorld-eScan	Trojan.GenericKD.34032754
FireEye	Trojan.GenericKD.34032754
ALYac	Trojan.GenericKD.34032754
BitDefender	Trojan.GenericKD.34032754
F-Prot	W32/SuspPack.FW.gen!Eldorado
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
GData	Trojan.GenericKD.34032754
AegisLab	Trojan.Win32.Generic.4!c
Endgame	malicious (high confidence)
Emsisoft	Trojan.GenericKD.34032754 (B)
Cyren	W32/SuspPack.FW.gen!Eldorado
MAX	malware (ai score=89)
Arcabit	Trojan.Generic.D2074C72
Microsoft	Trojan:Win32/Ymacco.AACC
Ad-Aware	Trojan.GenericKD.34032754
TrendMicro-HouseCall	TROJ_GEN.R011H0CFO20
SentinelOne	DFI – Suspicious PE
Fortinet	W32/GenericKD.D8F3!tr
AVG	Win32:Evo-gen [Susp]
CrowdStrike	win/malicious_confidence_60% (W)
MaxSecure	Win.MxResIcn.Heur.Gen

How to remove Trojan:Win32/Ymacco.AACC?

Trojan:Win32/Ymacco.AACC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X