Trojan

Trojan:Win32/Ymacco.AB93 removal

Malware Removal

The Trojan:Win32/Ymacco.AB93 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Ymacco.AB93 virus can do?

  • Injection (inter-process)
  • Reads data out of its own binary image
  • Uses Windows utilities for basic functionality
  • A potential decoy document was displayed to the user
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win32/Ymacco.AB93?


File Info:

crc32: A09DBF29
md5: 8ffc45b97b9bfa064dd1be479aa17022
name: upload_file
sha1: 4b5da82e8858b273c2ce0721a69c3f9a72bf39d7
sha256: 93f0b7547e1420c9949ce0f0009c2277ee63c63970b39df47248ce2de008d24f
sha512: 6582984778068a6c332ca8452ee3ba4e73a430c50bf04da78ecd2a0373c3f70e04d248da59e60f745d220fd12948cdbdef1ba01d95a0872e14a76e248d8d2fa2
ssdeep: 768:Eat/hnrsPxgOH59EEvg9NhS/tJHtsqFaEpD37C/o+qCbRCjV/l:Eat/tsFZ/g9NhE46Pf+rRCjtl
type: ELF 32-bit LSB executable, Renesas SH, version 1 (SYSV), statically linked, stripped

Version Info:

0: [No Data]

Trojan:Win32/Ymacco.AB93 also known as:

DrWebLinux.Mirai.4350
MicroWorld-eScanTrojan.Linux.Mirai.1
FireEyeTrojan.Linux.Mirai.1
McAfeeLinux/Mirai.f
ZillyaTrojan.Mirai.Linux.75497
AegisLabTrojan.Linux.Mirai.K!c
BitDefenderThetaGen:NN.Mirai.34196
CyrenELF/Mirai.G.gen!Camelot
SymantecTrojan.Gen.NPE
ESET-NOD32a variant of Linux/Mirai.A
TrendMicro-HouseCallBackdoor.Linux.MIRAI.USELVGT
ClamAVUnix.Trojan.Mirai-7100807-0
KasperskyHEUR:Backdoor.Linux.Mirai.b
BitDefenderTrojan.Linux.Mirai.1
NANO-AntivirusTrojan.Elf32.Mirai.hsitio
RisingBackdoor.Mirai!8.E05B (TFE:14:ZrUSpCC7meN)
Ad-AwareTrojan.Linux.Mirai.1
ComodoTrojWare.Win32.Genome.nqfuo@0
F-SecureMalware.LINUX/Mirai.bonb
TrendMicroBackdoor.Linux.MIRAI.USELVGT
SophosMal/Generic-S
GDataTrojan.Linux.Mirai.1
AviraLINUX/Mirai.bonb
Antiy-AVLTrojan/Generic.ASELF.3A9A5
MicrosoftTrojan:Win32/Ymacco.AB93
ArcabitTrojan.Linux.Mirai.1
AhnLab-V3Linux/Mirai.Gen35
ZoneAlarmHEUR:Backdoor.Linux.Mirai.b
Avast-MobileELF:Mirai-FY [Trj]
CynetMalicious (score: 85)
ALYacTrojan.Linux.Mirai.1
MAXmalware (ai score=81)
TencentBackdoor.Linux.Mirai.wbc
IkarusTrojan.Linux.Mirai
FortinetLinux/Mirai.A!tr
AVGELF:Mirai-AAJ [Trj]
Qihoo-360virus.elf.mirai.c

How to remove Trojan:Win32/Ymacco.AB93?

Trojan:Win32/Ymacco.AB93 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment