About "Trojan:Win32/Ymacco.AB51" infection

The Trojan:Win32/Ymacco.AB51 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Ymacco.AB51 virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs
Appends a known encryptJJS ransomware file extension to files that have been encrypted

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/Ymacco.AB51?


File Info:
crc32: 61091961
md5: 13f92be79c9cc8288365f556d763177b
name: eggdrop1.6.13win32.exe
sha1: 13203f13a41ebe9c8991c53de2678d09de10ddcb
sha256: 51479da1375fd7a0256209c212a51c3325eaa1790b177145d4988594dac763d0
sha512: 7ca4cc7f5d30d9becf1aa83ca9db24e30ac682611aa7d91c3653adad0e3d1d3c634e2f46cb7d7cf5796442fb7172ef7d69886446be435d251a8d6115218807ef
ssdeep: 49152:RrC7VUSlQqMf5KwQstE0oPDCOeEV32EaQjQY+c63PJDvPLh:Pfgwpt1mDCtq32EaQEXPJD9
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Trojan:Win32/Ymacco.AB51 also known as:

Bkav	W32.AIDetectVM.malware2
FireEye	Application.Eggbot.A
McAfee	Artemis!13F92BE79C9C
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
BitDefender	Application.Eggbot.A
Cybereason	malicious.79c9cc
Symantec	Hacktool
Avast	Win32:Malware-gen
GData	Application.Eggbot.A (2x)
Kaspersky	not-a-virus:Client-IRC.Win32.Eggdrop.1613
NANO-Antivirus	Trojan.Win32.Eggdrop.dudbot
AegisLab	Riskware.Win32.Eggdrop.1!c
Sophos	Generic PUA GG (PUA)
Comodo	Malware@#2nef4jzoirxrc
DrWeb	Program.EggBot
Emsisoft	Application.Eggbot.A (B)
Jiangmin	Client-IRC.Eggdrop.a
Webroot	W32.Heuristic.Gen
Antiy-AVL	Trojan[Dropper]/Win32.Danseed.b
Arcabit	Application.Eggbot.A
ZoneAlarm	not-a-virus:Client-IRC.Win32.Eggdrop.1613
Microsoft	Trojan:Win32/Ymacco.AB51
MAX	malware (ai score=97)
Ikarus	not-a-virus:Client-IRC.Win32.Eggdrop
Panda	Trj/CI.A
Rising	Trojan.Occamy!8.F1CD (TFE:5:ACVw27sjE0)
Yandex	Riskware.IRC!
eGambit	Generic.Malware
Fortinet	Riskware/Eggdrop
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Application.BO.cd5

How to remove Trojan:Win32/Ymacco.AB51?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan:Win32/Ymacco.AB51” infection