Should I remove “Symmi.25196”?

The Symmi.25196 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.25196 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Anomalous binary characteristics
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Symmi.25196?

File Info:
name: 54EE016FB2633337E64E.mlw
path: /opt/CAPEv2/storage/binaries/92ea2013af942a4939a23f24218b2f3256d32d45c1a87c7047af45757ddba7cf
crc32: 4C50BED4
md5: 54ee016fb2633337e64e1109f1ef3c89
sha1: 7bf01dce553bd9232631328cafcb033255b5d409
sha256: 92ea2013af942a4939a23f24218b2f3256d32d45c1a87c7047af45757ddba7cf
sha512: 5ce494972f0347afaba4b86943a5b56ed4c203b57fb17f93c3f8d5121153fc924e7e354c12084988ddaaead0cd78d01872b3c8b191aa2b0359cb5d9e1d661fc8
ssdeep: 3072:rZlcPIDHQXftsa01SOq1RY4uJr/I5fEKcpGJsXS97O8ZDh:LcPIDd+JleGJ9999
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BF541D68E3D321C0D8669D787183B3DB883A3065BA332496D7162795CD29F80D72D9BF
sha3_384: 45e88fff381b6ae701f3c1d4a11c6b64694693ae25618875e6069857c14d1ed2255c701b6d09609d9d0795578ff508be
ep_bytes: 6834124000e8eeffffff000000000000
timestamp: 2011-01-10 09:38:22

Version Info:
Translation: 0x0409 0x04b0
CompanyName: ezEeU54
ProductName: ezEeU812
FileVersion: 5.58
ProductVersion: 5.58
InternalName: ezEeU54
OriginalFilename: ezEeU54.exe

Symmi.25196 also known as:

How to remove Symmi.25196?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.