Categories: Malware

VirTool:Win32/Ymacco.AA90 removal tips

The VirTool:Win32/Ymacco.AA90 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/Ymacco.AA90 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process attempted to delay the analysis task.
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Tries to unhook or modify Windows functions monitored by Cuckoo
Checks the CPU name from registry, possibly for anti-virtualization
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine VirTool:Win32/Ymacco.AA90?


File Info:
crc32: 7D429D73md5: 467bd926a342db190b19232ec7611382name: upload_filesha1: b7b87ffcd927de40bb696eab20c5bf2bc55ea169sha256: 9011468f8a2d455ad6446b9f8e277db5b7daf0becf65644ad12b94bcad401380sha512: 3a63d2d402f3cc339c4e1464c05749fcde4f460743985c6c2fd9c3d669db82b19ec520795754dae053973bc95fe9649f3aede18f170819341bd4816c1d7a0178ssdeep: 12288:ZgftlTxIDJRRtYRNeuawx2+8zVQLlcqPTxUHYY3UmNUSdKV1vTCbn8UySkMeDCs:Zg1JxIwP5YxaZ0dD6SMV1LWnUOeztype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

VirTool:Win32/Ymacco.AA90 also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.29093
MicroWorld-eScan	Trojan.GenericKDZ.69509
FireEye	Generic.mg.467bd926a342db19
CAT-QuickHeal	Trojan.Kryptik
ALYac	Trojan.GenericKDZ.69509
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0056c99c1 )
BitDefender	Trojan.GenericKDZ.69509
K7GW	Trojan ( 0056c99c1 )
Cybereason	malicious.cd927d
TrendMicro	TrojanSpy.MSIL.TASKUN.USXVPHH20
BitDefenderTheta	Gen:NN.ZelphiF.34196.2GW@aKZAkFki
Cyren	W32/Injector.ORWQ-3620
Symantec	Infostealer.Lokibot!43
TrendMicro-HouseCall	TrojanSpy.MSIL.TASKUN.USXVPHH20
Paloalto	generic.ml
ClamAV	Win.Keylogger.AgentTesla-9372622-1
Kaspersky	HEUR:Trojan.Win32.Kryptik.gen
Alibaba	VirTool:Win32/Ymacco.360ee7e6
NANO-Antivirus	Trojan.Win32.Kryptik.hrmdcv
ViRobot	Trojan.Win32.Z.Kryptik.896512.AA
Rising	Trojan.Injector!1.CA8A (CLOUD)
Ad-Aware	Trojan.GenericKDZ.69509
Comodo	TrojWare.Win32.Genome.agent@0
F-Secure	Trojan.TR/Kryptik.upfha
Zillya	Trojan.Injector.Win32.762513
Invincea	heuristic
Sophos	Mal/Generic-S
Ikarus	Trojan.Inject
Jiangmin	Trojan.Kryptik.cbz
Avira	TR/Kryptik.upfha
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Win32.Kryptik
Microsoft	VirTool:Win32/Ymacco.AA90
Arcabit	Trojan.Generic.D10F85
ZoneAlarm	HEUR:Trojan.Win32.Kryptik.gen
GData	Win32.Trojan.PSE.8R1IYS
Cynet	Malicious (score: 100)
AhnLab-V3	Suspicious/Win.Delphiless.X2091
McAfee	Fareit-FPQ!467BD926A342
VBA32	TScope.Trojan.Delf
Malwarebytes	Trojan.MalPack
Panda	Trj/Genetic.gen
APEX	Malicious
ESET-NOD32	a variant of Win32/Injector.ENAI
Tencent	Win32.Trojan.Kryptik.Pcsx
MaxSecure	Trojan.Malware.73736783.susgen
Fortinet	W32/Injector.EMZL!tr
Webroot	W32.Trojan.Gen
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_70% (W)
Qihoo-360	Win32/Trojan.469