About “Trojan:Win32/Ymacco.AB6E” infection

The Trojan:Win32/Ymacco.AB6E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Ymacco.AB6E virus can do?

How to determine Trojan:Win32/Ymacco.AB6E?


File Info:
crc32: ACA6E306
md5: 9cacec575782d7b25a94f10e2061ac4c
name: 9CACEC575782D7B25A94F10E2061AC4C.mlw
sha1: 366a9e646a167fcd2381bc15905f7d7a5e76a100
sha256: 6eaeca0cf28e74de6cfd82d29a3c3cc30c2bc153ac811692cc41ee290d766474
sha512: e5a9cfa9ae4cf46a7c1a5edd4e2df88cfd844b104b666edcc4cc77daa4cfc814e03b4a9514d26130d5018ee356c30394ef477fbf2a2f047392fcb1c9c1008416
ssdeep: 1536:t9/mGK4ZA1Cu1Ytn9Z3dRf64YJQEhDJpgr4GWF1go2x1va7WKVZF+kNkB7a:X/mGK4ZA0uk9fwJfTO0F1iBa7brFXkB
type: PE32+ executable (DLL) (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: WinSpl
FileVersion: 6.1.7600.16413
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16413
FileDescription: Spooler DLL
tRanSLaTion: 0x0409 0x04b0

Trojan:Win32/Ymacco.AB6E also known as:

Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.Win64
ALYac	Trojan.GenericKD.46225409
Cylance	Unsafe
Zillya	Trojan.Agent.Win64.8028
Sangfor	Trojan.Win64.Agent.qwhvdf
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win64/Gelsemium.db610198
K7GW	Trojan ( 00567d141 )
K7AntiVirus	Trojan ( 00567d141 )
Cyren	W64/Trojan.GGYS-6483
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win64/Gelsemium.C
Avast	Win64:Trojan-gen
Kaspersky	Trojan.Win64.Agent.qwhvdf
BitDefender	Trojan.GenericKD.46225409
NANO-Antivirus	Trojan.Win64.Mlw.ivcjfl
MicroWorld-eScan	Trojan.GenericKD.46225409
Ad-Aware	Trojan.GenericKD.46225409
Sophos	Mal/Generic-S + Troj/Agent-BHET
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PE521
McAfee-GW-Edition	RDN/Generic.dx
FireEye	Trojan.GenericKD.46225409
Emsisoft	Trojan.GenericKD.46225409 (B)
Webroot	W32.Trojan.Gen
Avira	TR/Agent.jjdro
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Ymacco.AB6E
Arcabit	Trojan.Generic.D2C15801
AegisLab	Trojan.Win64.Agent.4!c
ZoneAlarm	Trojan.Win64.Agent.qwhvdf
GData	Trojan.GenericKD.46225409
AhnLab-V3	Malware/Win64.Generic.C4267353
McAfee	RDN/Generic.dx
MAX	malware (ai score=88)
VBA32	Trojan.Win64.Agent
Malwarebytes	Malware.AI.4159478908
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PE521
Yandex	Trojan.Agent!Dp6GC+zZovY
Ikarus	Trojan.Win64.Agent
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	W64/Agent.QWHVDF!tr
AVG	Win64:Trojan-gen
Paloalto	generic.ml

How to remove Trojan:Win32/Ymacco.AB6E?

Trojan:Win32/Ymacco.AB6E removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X