Trojan:Win32/Ymacco.ABB8 removal guide

The Trojan:Win32/Ymacco.ABB8 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Ymacco.ABB8 virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:Win32/Ymacco.ABB8?


File Info:
crc32: B81D6503
md5: ad0b4b4e5dc6a65ff2200d72a02e0131
name: upload_file
sha1: c9d85ffc6e42e6482e9d599bbf6237e0c65be443
sha256: b83d05f60ec6ba94e94742494f697226331bd293721b04edbc4762ee538e821d
sha512: f7e9aa47f51f0575be542fbb56653ee9541c04c75e6753135f3cef0321cc416cd423fa0339587482aee42937e024d2d13c0b866b881be5f8f68a11bda73e8182
ssdeep: 768:jexXcPuLW6/Rfj3zeypNcwvoG/XnoZo/:yxUuHdayQaoG/Xyg
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0410 0x04b0
InternalName: CARNALLIT
FileVersion: 2.00
CompanyName: Taxan
LegalTrademarks:     
Comments: Taxan
ProductName: Taxan
ProductVersion: 2.00
OriginalFilename: CARNALLIT.exe

Trojan:Win32/Ymacco.ABB8 also known as:

Bkav	W32.AutorunHAE.Fam.Worm
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.44010258
CAT-QuickHeal	Trojan.Vebzenpak
ALYac	Trojan.Agent.GuLoader
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan-Downloader ( 005661971 )
BitDefender	Trojan.GenericKD.44010258
K7GW	Trojan-Downloader ( 005661971 )
TrendMicro	TROJ_GEN.R057C0WJ920
Cyren	W32/Trojan.QUSL-8035
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
ClamAV	Win.Trojan.VBGeneric-9775234-0
Kaspersky	Trojan.Win32.Vebzenpak.aaws
Alibaba	TrojanDownloader:Win32/Vebzenpak.0b49b3b7
AegisLab	Trojan.Multi.Generic.4!c
Ad-Aware	Trojan.GenericKD.44010258
Emsisoft	Trojan.GenericKD.44010258 (B)
Comodo	Malware@#v31nbdmfrgm8
Invincea	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Trojan.pt
FireEye	Generic.mg.ad0b4b4e5dc6a65f
Sophos	Mal/Generic-S
Ikarus	Trojan.VB.Crypt
Jiangmin	Trojan.Vebzenpak.hsw
Antiy-AVL	Trojan/Win32.Vebzenpak
Microsoft	Trojan:Win32/Ymacco.ABB8
Arcabit	Trojan.Generic.D29F8B12
ZoneAlarm	Trojan.Win32.Vebzenpak.aaws
GData	Trojan.GenericKD.44010258
AhnLab-V3	Trojan/Win32.VBKrypt.R352865
McAfee	Artemis!AD0B4B4E5DC6
MAX	malware (ai score=85)
VBA32	Trojan.Wacatac
Malwarebytes	Trojan.Injector
Panda	Trj/GdSda.A
ESET-NOD32	Win32/TrojanDownloader.Agent.FCS
TrendMicro-HouseCall	TROJ_GEN.R057C0WJ920
Rising	Downloader.Agent!8.B23 (TFE:5:ouMP5UkhkzB)
Yandex	Trojan.Igent.bUAo06.26
eGambit	Unsafe.AI_Score_99%
Fortinet	Malicious_Behavior.SB
BitDefenderTheta	Gen:NN.ZevbaF.34566.cm0@amBWE!gG
AVG	Win32:DropperX-gen [Drp]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Win32/Trojan.8a1

How to remove Trojan:Win32/Ymacco.ABB8?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan:Win32/Ymacco.ABB8 removal guide