Adware.Symmi.5238 (file analysis)

The Adware.Symmi.5238 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.Symmi.5238 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Adware.Symmi.5238?


File Info:
name: 14534EF6C06A3C2CF04D.mlw
path: /opt/CAPEv2/storage/binaries/8686d8bae0c7d2ea0a0fa5cd35f5be531d511fb78128df2f3a872b1338d911d9
crc32: 929B7967
md5: 14534ef6c06a3c2cf04d1fe6368c21a7
sha1: 4817bf0ad670fc6e0ddd31276b6e24e93d6c64a4
sha256: 8686d8bae0c7d2ea0a0fa5cd35f5be531d511fb78128df2f3a872b1338d911d9
sha512: 3324687f0fe4c15ef126595389b6729a50092eb776c7fddc7d82d807e3a7f9c89ee3488ef0fd47cda2ee0f148d1882825a9fc6150ac28886ca5fd40fc73d3865
ssdeep: 12288:gsRv7nPMtu7/Oq5z0HH2aI3eI3ACQ/WzcxLpsFwBl01vy1hi3TpghTn4D:g0TPVrOGzgHiujCQ/WzcZAA01vy88Tn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18A158F26F2D18433D2731A38AC6B939D9929BF102E3C644A7BF41E4CAF3974179252D7
sha3_384: ec1a2d2b692d782e7ede5c0c757f1ce21f4771a5371d6c3d1e2864307af8b0e4e6faa00b512f66dc8ba53b8b3f97120f
ep_bytes: 558becb9060000006a006a004975f953
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Adware.Symmi.5238 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Delf.4!c
MicroWorld-eScan	Gen:Variant.Adware.Symmi.5238
ClamAV	Win.Trojan.Delf-9286
FireEye	Generic.mg.14534ef6c06a3c2c
Skyhigh	BehavesLike.Win32.Xanfpezes.dh
McAfee	Artemis!14534EF6C06A
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	TrojanClicker:Win32/Delphi.ba4a7114
Cybereason	malicious.ad670f
Arcabit	Trojan.Adware.Symmi.D1476
BitDefenderTheta	Gen:NN.ZelphiF.36744.4GW@a0lVm1cb
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanClicker.Delf.NHG
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Adware.Symmi.5238
NANO-Antivirus	Trojan.Win32.Delf.dzlxoa
Avast	Win32:Adware-gen [Adw]
Tencent	Malware.Win32.Gencirc.114ecde8
Emsisoft	Gen:Variant.Adware.Symmi.5238 (B)
F-Secure	Trojan.TR/Dldr.Delphi.Gen
DrWeb	Trojan.Click.23635
VIPRE	Gen:Variant.Adware.Symmi.5238
Sophos	Mal/Behav-417
Ikarus	Trojan-Dropper.Agent
Webroot	Trojan:Win32/Trufip!rts
Google	Detected
Avira	TR/Dldr.Delphi.Gen
Antiy-AVL	Trojan/Win32.Delf
Kingsoft	Win32.Troj.Unknown.a
Xcitium	Malware@#3fuxo07gtdi5t
Microsoft	Trojan:Win32/Trufip!rts
ViRobot	Trojan.Win32.Delf.927232
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Adware.Symmi.5238
Varist	W32/Delf.AL.gen!Eldorado
AhnLab-V3	Trojan/Win32.Xema.C140837
VBA32	BScope.Trojan.Click
ALYac	Gen:Variant.Adware.Symmi.5238
MAX	malware (ai score=99)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
Rising	Trojan.Delf!1.6483 (CLASSIC)
Yandex	Trojan.GenAsa!msInNQu8d+g
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.798490.susgen
Fortinet	W32/Delf.FIP!tr
AVG	Win32:Adware-gen [Adw]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Adware.Symmi.5238?

Adware.Symmi.5238 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X