Symmi.20325 removal tips

The Symmi.20325 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.20325 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Symmi.20325?


File Info:
crc32: 87125E3E
md5: cbc9df2bd54482848ebfe0506798c2ce
name: CBC9DF2BD54482848EBFE0506798C2CE.mlw
sha1: 24f6cbc5202c6cb35d79d2ab9b1718bfe0ef1cea
sha256: 4e83144e37aab503dbf0f0ad83f910bc298ec773fd20c06d6f97808d304b8e1d
sha512: 1de7b9349c1afdfcf97c5dc95ead2363544ef0595db4ef692dfac84b5a50143664259de13b68607f54ea40106687aa1d198d7d38339bfefa789ef316f6f2279c
ssdeep: 6144:o67sNP93FAUJkoAyD5XBas2NZge0ZZlsTOIx4y04+cA:oR93yoA+XBL2XqZlsre
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Copyright (C) 2009-2012 - Bigasoft Group
InternalName: relogutil
FileVersion: 3.0.2.1
CompanyName: Bigasoft Group
ProductName: Performance Relogging Utility
ProductVersion: 3.0.2.1
FileDescription: Performance Relogging Utility
OriginalFilename: relogutil
Translation: 0x1009 0x04b0

Symmi.20325 also known as:

MicroWorld-eScan	Gen:Variant.Symmi.20325
ALYac	Gen:Variant.Symmi.20325
Cylance	Unsafe
VIPRE	Trojan.Win32.Reveton.b!ag (v)
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0055e39b1 )
BitDefender	Gen:Variant.Symmi.20325
K7GW	Trojan ( 0055e39b1 )
Cybereason	malicious.bd5448
BitDefenderTheta	Gen:NN.ZexaF.34590.pmKfaaQxkqaO
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:LockScreen-WV [Trj]
NANO-Antivirus	Trojan.Win32.Panda.crbezn
Ad-Aware	Gen:Variant.Symmi.20325
Emsisoft	Gen:Variant.Symmi.20325 (B)
F-Secure	Heuristic.HEUR/AGEN.1113290
DrWeb	Trojan.PWS.Panda.2401
Zillya	Trojan.Zbot.Win32.123689
TrendMicro	TROJ_RANSOM.SMKJ
McAfee-GW-Edition	PWS-Zbot-FAPI!0E6E7A70DEF9
Sophos	Mal/Generic-S
Ikarus	Trojan-PWS.Win32.Zbot
Jiangmin	Trojan/Generic.awlgh
Avira	HEUR/AGEN.1113290
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Unknown
Arcabit	Trojan.Symmi.D4F65
ZoneAlarm	HEUR:Trojan.Win32.Generic
Cynet	Malicious (score: 100)
AhnLab-V3	Spyware/Win32.Zbot.R65577
McAfee	Artemis!CBC9DF2BD544
VBA32	TrojanSpy.Zbot
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/Genetic.gen
ESET-NOD32	Win32/Spy.Zbot.AAO
TrendMicro-HouseCall	TROJ_RANSOM.SMKJ
Tencent	Win32.Trojan.Generic.Tccf
Yandex	Trojan.GenAsa!Uiy13bsqUU8
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_61%
Fortinet	W32/Zbot.AAO!tr
AVG	Win32:LockScreen-WV [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.767

How to remove Symmi.20325?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.