What is “Adware.Symmi.71244 (B)”?

The Adware.Symmi.71244 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Symmi.71244 (B) virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Adware.Symmi.71244 (B)?

File Info:
name: 248C594CCF812192E62C.mlw
path: /opt/CAPEv2/storage/binaries/cce4483264d39a50e5015d0963abeeff62ef043a4bf0b6a1964dfaf214bdc9e4
crc32: 08946F4F
md5: 248c594ccf812192e62ce60cb90958c3
sha1: 343c751668b32e441753426c6e4f533b32fa4c16
sha256: cce4483264d39a50e5015d0963abeeff62ef043a4bf0b6a1964dfaf214bdc9e4
sha512: 1de1864abd9903f9653def24f7bcb276a919dfacbaf9ca51cd9def35d791021e379a73a29c5caf10d4a3c62a29a351779717a46a925f66550cf200deeeb02cf6
ssdeep: 12288:E2UtyZ/WgDQB6KZfEwIdJk5hXFiJEzQmOOd5nbKWF0+AlpbMhQ5LHn/0O110:E2U4ZTDQBZgdJk5xFQ1mPd5nPw4in/0D
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T159F4230A57EA94F4E173AE705D2ED042A6BFBE389D70A01D32ADACCD4B371D0481E765
sha3_384: 372005623074b4f184cfb8454035343196a342d613a735f4eb2bc592093a86b28114270930c8d01dd61c752abf8c1d61
ep_bytes: 558bec83c4c453565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: Katsuie Inc.                                                
FileDescription: Aoe2 Patch Setup                                            
FileVersion:                     
LegalCopyright:                                                                                                     
ProductName: Aoe2 Patch                                                  
ProductVersion:                     
Translation: 0x0000 0x04b0

Adware.Symmi.71244 (B) also known as:

How to remove Adware.Symmi.71244 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.