Malware

Symmi.34741 (B) information

Malware Removal

The Symmi.34741 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Symmi.34741 (B) virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

sunray1975.zapto.org

How to determine Symmi.34741 (B)?


File Info:

crc32: E0E6F9E3
md5: 35b9ab7e4788c390fe541d43c85c62ed
name: 35B9AB7E4788C390FE541D43C85C62ED.mlw
sha1: 18871ece983ff7ba06da1b281e57f8f07a83b319
sha256: b8868d084eec96317602072d40f9585d98ac0b477aaf6edebfbdeb6b3c02439d
sha512: 1c793310b4c7e24ff0adf86198473f6e40786fb14c000ac7883687e8315de7506c5112bf43473e04e62f90ad462981a10689b973a81e727981d14429c6c00e66
ssdeep: 196608:8Iazg7DSmIazg7DSmIazg7DSmIazg7DSN:2g7uYg7uYg7uYg7uN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Symmi.34741 (B) also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 00548e051 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader6.7779
CynetMalicious (score: 100)
CAT-QuickHealTrojan.WacatacPMF.S16755091
ALYacGen:Variant.Symmi.34741
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan ( 00548e051 )
Cybereasonmalicious.e4788c
CyrenW32/Injector.OZVT-2500
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.AHHO
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:MBRlock-DV [Trj]
ClamAVWin.Trojan.Mbrlock-9779766-0
KasperskyVHO:Trojan-Ransom.Win32.Blocker.gen
BitDefenderGen:Variant.Symmi.34741
NANO-AntivirusTrojan.Win32.Dapato.bsjzfg
MicroWorld-eScanGen:Variant.Symmi.34741
TencentTrojan.Win32.Blocker.zg
Ad-AwareGen:Variant.Symmi.34741
SophosML/PE-A
ComodoTrojWare.Win32.Injector.HO@82j6jo
BitDefenderThetaAI:Packer.DC953A6A21
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
FireEyeGeneric.mg.35b9ab7e4788c390
EmsisoftGen:Variant.Symmi.34741 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Blocker.trx
AviraHEUR/AGEN.1114900
Antiy-AVLTrojan/Generic.ASMalwS.30F91B2
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataWin32.Trojan.PSE.1D0PRQS
TACHYONRansom/W32.Blocker.8317440
AhnLab-V3Dropper/Win32.Dapato.R83155
McAfeeGenericRXIP-BJ!35B9AB7E4788
MAXmalware (ai score=86)
VBA32TrojanRansom.Blocker
MalwarebytesTrojan.Injector
PandaTrj/Genetic.gen
RisingTrojan.Injector!1.DA56 (CLASSIC)
YandexTrojan.Injector!6XR9EGb/HqY
IkarusTrojan-Ransom.Blocker
MaxSecureTrojan.Malware.124870659.susgen
FortinetW32/Injector.AHHO!tr
AVGWin32:MBRlock-DV [Trj]

How to remove Symmi.34741 (B)?

Symmi.34741 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment