Categories: Malware

Should I remove “Symmi.28558”?

The Symmi.28558 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.28558 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine Symmi.28558?


File Info:
name: C111A0B511C4EB8862A9.mlwpath: /opt/CAPEv2/storage/binaries/744bdde75770cc26fbf71f174212c54979f182ff4edeb980b6220ea7d976c459crc32: 503E6BAFmd5: c111a0b511c4eb8862a9fe6c8f703324sha1: be852a8e52832fa1b3066a787a50e1f556417d46sha256: 744bdde75770cc26fbf71f174212c54979f182ff4edeb980b6220ea7d976c459sha512: b24ca9ec156d87c9c4c78598b10c4f74913a594dd8fa8942ccfafb4b01a182daa214ccdeb5f953bbb0c53ffe0cd08e099597bb286eaabac3d2a1339187762298ssdeep: 12288:BToHXhoFajXLV6y9wUW9uKNHxnTZhujV9POwh7jqvRCpyo7:BToHXhfj4Gwn9PNRVEJNPqvUyo7type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T188559E12B991C4F1D24D26345566B73EBA75BE458A30CAC3F3D4FEAB3C32281563621Esha3_384: 5d43b4889204cd812a63b8fe79bb417718fca0aafc8595e92c5d235c37a10ed25559703c5282fe1290738e91c979626eep_bytes: 558bec538b5d08568b750c578b7d1085timestamp: 2013-04-16 04:09:54
Version Info:
FileVersion: 1.0.0.0FileDescription: 易语言程序ProductName: 易语言程序ProductVersion: 1.0.0.0LegalCopyright: 作者版权所有 请尊重并使用正版Comments: 本程序使用易语言编写(http://www.eyuyan.com)Translation: 0x0804 0x04b0

Symmi.28558 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lIa2
Elastic	Windows.Generic.Threat
MicroWorld-eScan	Gen:Variant.Symmi.28558
CAT-QuickHeal	RiskTool.FlyStudio.1984
Skyhigh	BehavesLike.Win32.Generic.tm
McAfee	Generic.gn
Cylance	unsafe
VIPRE	Gen:Variant.Symmi.28558
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Password-Stealer ( 000174511 )
Alibaba	RiskWare:Win32/FlyStudio.1e922c30
K7GW	Password-Stealer ( 000174511 )
Baidu	Win32.Trojan-PSW.OLGames.an
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/FlyStudio.HackTool.A potentially unwanted
APEX	Malicious
TrendMicro-HouseCall	TROJ_GEN.R002C0PC424
Paloalto	generic.ml
ClamAV	Win.Dropper.Detected-10008752-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Symmi.28558
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Symmi.28558 (B)
Google	Detected
Zillya	Trojan.Generic.Win32.1865372
TrendMicro	TROJ_GEN.R002C0PC424
FireEye	Generic.mg.c111a0b511c4eb88
Sophos	Troj/Agent-BDTR
SentinelOne	Static AI – Malicious PE
Varist	W32/OnlineGames.HH.gen!Eldorado
MAX	malware (ai score=84)
Antiy-AVL	RiskWare/Win32.FlyStudio.a
Kingsoft	malware.kb.a.993
Microsoft	Trojan:Win32/Wacatac.A!ml
Xcitium	TrojWare.Win32.Agent.OSCF@5rs7jr
Arcabit	Trojan.Symmi.D6F8E
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Trojan.FlyStudio.I
Cynet	Malicious (score: 100)
VBA32	BScope.Trojan.Wacatac
ALYac	Gen:Variant.Symmi.28558
Malwarebytes	Generic.Malware.AI.DDS
Rising	Malware.Undefined!8.C (TFE:5:vhsfBryYydT)
Ikarus	Trojan-PSW.QQTen
MaxSecure	Dropper.Dinwod.frindll
Fortinet	Riskware/QQTen
BitDefenderTheta	Gen:NN.ZedlaF.36804.rv8@aefdLBnb
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Symmi