Trojan

About “Trojan:Win32/Ymacco.AAD0” infection

Malware Removal

The Trojan:Win32/Ymacco.AAD0 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Ymacco.AAD0 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win32/Ymacco.AAD0?


File Info:

crc32: DEBBBF2D
md5: 13fc8c5281a3ec99e5ea8653243d2b3d
name: tspam.exe
sha1: 4edd1c14c08efb5164a1c7c67b327bfe47bfd25c
sha256: d0a32ab58255bab81f711d4fc9d64d34a2455b7bb734640c1f7bae6ab96a2854
sha512: a7538259d7bb6aef89436dce3e78e7a25f46cdae2dce01ba33ab93b341f011e1d16bf2a95842813a2313b2c7fdf2a0d432955a3607df2a95b010c0479c7fc96d
ssdeep: 192:u6rLz6/rz+LhCObQChK15NP1oyniU8zGaf9BpEI:iP+LQOVhK15510U86M9BuI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Ymacco.AAD0 also known as:

BkavW32.AIDetectVM.malware1
MicroWorld-eScanGeneric.GC.Downloader.96012D7C
FireEyeGeneric.mg.13fc8c5281a3ec99
McAfeeArtemis!13FC8C5281A3
MalwarebytesTrojan.Phorpiex
SangforMalware
K7AntiVirusTrojan ( 00569c731 )
BitDefenderGeneric.GC.Downloader.96012D7C
K7GWTrojan ( 00569c731 )
Cybereasonmalicious.281a3e
BitDefenderThetaAI:Packer.AB5F195F1F
F-ProtW32/Genome.I.gen!Eldorado
SymantecML.Attribute.HighConfidence
TrendMicro-HouseCallTrojan.Win32.WACATAC.THFCOBO
Paloaltogeneric.ml
GDataGeneric.GC.Downloader.96012D7C
KasperskyTrojan.Win32.Vilsel.dzug
AlibabaWorm:Win32/Phorpiex.8846ab0c
RisingWorm.Phorpiex!8.48D (CLOUD)
Ad-AwareGeneric.GC.Downloader.96012D7C
SophosMal/Generic-S
F-SecureTrojan.TR/Downloader.Gen
Invinceaheuristic
EmsisoftGeneric.GC.Downloader.96012D7C (B)
IkarusTrojan-Downloader.Agent
CyrenW32/Genome.I.gen!Eldorado
AviraTR/Downloader.Gen
MAXmalware (ai score=82)
Endgamemalicious (high confidence)
ArcabitGeneric.GC.Downloader.96012D7C
AegisLabTrojan.Win32.Malicious.4!c
ZoneAlarmTrojan.Win32.Vilsel.dzug
MicrosoftTrojan:Win32/Ymacco.AAD0
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.Generic.C2544633
Acronissuspicious
ALYacTrojan.Agent.Phorpiex
CylanceUnsafe
APEXMalicious
ESET-NOD32a variant of Win32/Phorpiex.X
TencentWin32.Worm.Phorpiex.Dzui
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/Phorpiex.X!worm
AVGFileRepMetagen [Malware]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan:Win32/Ymacco.AAD0?

Trojan:Win32/Ymacco.AAD0 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment