Malware

Should I remove “Symmi.1560”?

Malware Removal

The Symmi.1560 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Symmi.1560 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.

How to determine Symmi.1560?


File Info:

crc32: 0B5CE438
md5: d34d71430329f997eeda401c64d604a8
name: D34D71430329F997EEDA401C64D604A8.mlw
sha1: a98c0419e7d98da45788b86bfeb603afda37b62d
sha256: fce32a8ebfaad9054b6b3204b2c3e4a5483d6fefe3dbc2aa7b39fade136ba966
sha512: 09aeaec73061189f3bf95af1deba759d8d27c77f8540d225cab30b91a7ec0e41e417837ef0ff82c037a5d264cad3cc79e771e375846420c29a9b2b51da371712
ssdeep: 6144:X9TcOK4nDWgRAkPtkGQn8xID0DMFgYxeeHoQNfysmdn6wg:X9T1HR3PtkGLxe0DixeEnNfTmBzg
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2008-2009 www.ludashi.com
InternalName: x9c81x5927x5e08
FileVersion: 1.0.9.828
CompanyName: www.ludashi.com
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: x9c81x5927x5e08
SpecialBuild: http://www.ludashi.com
ProductVersion: 1.0
FileDescription: Computer-Z Data2 Library
OriginalFilename: ComputerZ2.dll
Translation: 0x0804 0x04b0

Symmi.1560 also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Inject.6805
MicroWorld-eScanGen:Variant.Symmi.1560
ALYacGen:Variant.Symmi.1560
CylanceUnsafe
ZillyaTrojan.MMM.Win32.2133
SangforMalware
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Generic.d0bfe310
CyrenW32/PcClient.O.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Agent.OQK
APEXMalicious
AvastWin32:Trojan-gen
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Symmi.1560
TencentWin32.Trojan.Spy.Wozl
Ad-AwareGen:Variant.Symmi.1560
SophosMal/Redos-F
ComodoMalware@#3s03ysz0k97wy
F-SecurePacked:W32/PeCan.A
VIPRETrojan-Dropper.Win32.Resdro.b (v) (not malicious)
InvinceaMal/Redos-H
FireEyeGeneric.mg.d34d71430329f997
EmsisoftGen:Variant.Symmi.1560 (B)
SentinelOneDFI – Malicious PE
WebrootW32.Backdoor.Gen
AviraTR/Spy.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Win32.MMM
MicrosoftTrojan:Win32/Wacatac.C!ml
ArcabitTrojan.Symmi.D618
AegisLabTrojan.Win32.Hupigon.lpgi
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Symmi.1560
AhnLab-V3Trojan/Win32.Dialer.R47504
Acronissuspicious
McAfeeArtemis!D34D71430329
MAXmalware (ai score=89)
PandaGeneric Malware
RisingMalware.Undefined!8.C (TFE:2:mXgj8ne5BjM)
YandexTrojan.MMM!YBORGB3eB+E
IkarusBackdoor.Win32.Zegost
FortinetW32/MMM.BZI!tr
AVGWin32:Trojan-gen
Qihoo-360Win32/Backdoor.Gh0st.BE

How to remove Symmi.1560?

Symmi.1560 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment