Categories: Malware

Symmi.20325 (B) removal tips

The Symmi.20325 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.20325 (B) virus can do?

Executable code extraction
Compression (or decompression)
Creates RWX memory
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Symmi.20325 (B)?


File Info:
crc32: CA210029md5: 8b3427b8db88f0ca517774eb32025bb0name: 8B3427B8DB88F0CA517774EB32025BB0.mlwsha1: 04ae9dc9c6e713632aa7155cee7e61cf81a91921sha256: 8b2018a8f328cac45126d16b9e41e80156a6e49f738bdafafe12c7865925cab6sha512: 67216e447007b06666acca00d75d1cd085b57fadf5b1b50285ce78b9305fd2ca63ffd8c39b296a0c09bf16c295dbda83111fdbed3c5218ca3c34dacbe07f0352ssdeep: 3072:/2fopKbc1wQLNUTcFMuiLpv9n4FBlo40:Aoz2QUEMugPn4F71type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Copyright (C) 2006-2012 - Soft-Zone InternationalInternalName: initwizFileVersion: 2.3.5.1CompanyName: Soft-Zone InternationalProductName: TPM Initialization WizardProductVersion: 2.3.5.1FileDescription: TPM Initialization WizardOriginalFilename: initwizTranslation: 0x1009 0x04b0

Symmi.20325 (B) also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0055e4091 )
DrWeb	Trojan.PWS.Panda.4026
Cynet	Malicious (score: 90)
ALYac	Gen:Variant.Symmi.20325
Cylance	Unsafe
Zillya	Trojan.Foreign.Win32.8889
Sangfor	Ransom.Win32.Urausy.C
Alibaba	Ransom:Win32/Foreign.4a536048
K7GW	Trojan ( 0055e4091 )
Cybereason	malicious.8db88f
Cyren	W32/Ransom.UWCF-0643
ESET-NOD32	Win32/LockScreen.APR
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Foreign.nbhu
BitDefender	Gen:Variant.Symmi.20325
NANO-Antivirus	Trojan.Win32.Panda.eccafp
MicroWorld-eScan	Gen:Variant.Symmi.20325
Tencent	Win32.Trojan.Foreign.Eawy
Ad-Aware	Gen:Variant.Symmi.20325
Sophos	Mal/Generic-R + Mal/Ransom-AL
Comodo	Malware@#gpj73bwrhjbe
BitDefenderTheta	Gen:NN.ZexaF.34628.gmKfau1@TVlk
VIPRE	Trojan.Win32.Reveton.b!ag (v)
TrendMicro	TROJ_SPNR.07DP13
McAfee-GW-Edition	Ransom-FAXC!8B3427B8DB88
FireEye	Generic.mg.8b3427b8db88f0ca
Emsisoft	Gen:Variant.Symmi.20325 (B)
Jiangmin	Trojan.Foreign.aja
Webroot	Trojan.Dropper.Gen
Avira	HEUR/AGEN.1100700
eGambit	Generic.Malware
Kingsoft	Win32.Heur.KVM007.a.(kcloud)
Microsoft	Ransom:Win32/Urausy.E
Arcabit	Trojan.Symmi.D4F65
AegisLab	Trojan.Win32.Foreign.4!c
GData	Gen:Variant.Symmi.20325
TACHYON	Ransom/W32.Foreign.151040
AhnLab-V3	Trojan/Win32.Foreign.R65441
McAfee	Ransom-FAXC!8B3427B8DB88
MAX	malware (ai score=100)
VBA32	Hoax.Foreign
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/Dtcontx.D
TrendMicro-HouseCall	TROJ_SPNR.07DP13
Rising	Ransom.Foreign!8.292 (CLOUD)
Yandex	Trojan.GenAsa!4gBeo9K9Kbw
Ikarus	Win32.LockScreen
MaxSecure	Trojan.Malware.5665941.susgen
Fortinet	W32/Zbot.AAO!tr
AVG	Win32:Malware-gen
Qihoo-360	Win32/Trojan.Foreign.HgIASOgA