What is "Trojan:Win32/Ymacco.AB67"?

The Trojan:Win32/Ymacco.AB67 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Ymacco.AB67 virus can do?

Injection (inter-process)
Uses Windows utilities for basic functionality
Attempts to repeatedly call a single API many times in order to delay analysis time
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/Ymacco.AB67?


File Info:
crc32: 8C15759E
md5: ca01420d7b9644606e2f019ef55b6884
name: upload_file
sha1: 78df4bcfc519d51354b38517fc698a982833a6d2
sha256: 67ffac551414c102fa4f19e79bf4c4fc6741cfddc50ba36b00cad8ebeb3f653d
sha512: f8a3f1f6cdfa1770594812f92b887c0fa67dcfb621e64829d3e0415c52d6fa20e707a41a502b348121a2e08cd2e539296a9a853f8bf349389fe81d6e186a3ace
ssdeep: 1536:4wOgQ8JS4OZm3/W97kJ2f4ol+QLk+ltLMSWy/ReAwJt8A73elv:X39HJ2f4ol+QLk+ltLMSWy/oAm8iulv
type: ELF 32-bit LSB  executable, Intel 80386, version 1 (SYSV), statically linked, stripped

Version Info:
0: [No Data]

Trojan:Win32/Ymacco.AB67 also known as:

ClamAV	Unix.Trojan.Mirai-6976991-0
FireEye	Trojan.Linux.Mirai.1
McAfee	Linux/Mirai.f
AegisLab	Trojan.Linux.Mirai.K!c
Sangfor	Malware
Symantec	Trojan.Gen.NPE
ESET-NOD32	a variant of Linux/Mirai.A
TrendMicro-HouseCall	Backdoor.Linux.MIRAI.SMLEM
GData	Trojan.Linux.Mirai.1
Kaspersky	HEUR:Backdoor.Linux.Mirai.b
BitDefender	Trojan.Linux.Mirai.1
MicroWorld-eScan	Trojan.Linux.Mirai.1
Tencent	Backdoor.Linux.Mirai.wan
Ad-Aware	Trojan.Linux.Mirai.1
Sophos	Mal/Generic-S
DrWeb	Linux.Mirai.4327
Zillya	Backdoor.Mirai.Linux.85972
TrendMicro	Backdoor.Linux.MIRAI.SMLEM
Emsisoft	Trojan.Linux.Mirai.1 (B)
Ikarus	Trojan.Linux.Mirai
Cyren	ELF/Mirai.E.gen!Camelot
Jiangmin	Backdoor.Linux.dgar
MAX	malware (ai score=80)
Antiy-AVL	Trojan[Backdoor]/Linux.Mirai.b
Microsoft	Trojan:Win32/Ymacco.AB67
Arcabit	Trojan.Linux.Mirai.1
AhnLab-V3	Linux/Mirai.Gen10
ZoneAlarm	HEUR:Backdoor.Linux.Mirai.b
Avast-Mobile	ELF:Mirai-FY [Trj]
BitDefenderTheta	Gen:NN.Mirai.34152
ALYac	Trojan.Linux.Mirai.1
Rising	Backdoor.Mirai/Linux!1.BBED (CLASSIC)
SentinelOne	DFI – Malicious ELF
Fortinet	ELF/Mirai.AT!tr
AVG	ELF:Mirai-APD [Trj]

How to remove Trojan:Win32/Ymacco.AB67?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Trojan:Win32/Ymacco.AB67”?