Symmi.44378 removal instruction

The Symmi.44378 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.44378 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Chinese
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Symmi.44378?

File Info:
name: 11AEE7E47CF08D57D5AD.mlw
path: /opt/CAPEv2/storage/binaries/c3179c85de08ce7273e74f38c41bd63ebbb2c0feac7e6399c12680f4ce9df760
crc32: 273DD316
md5: 11aee7e47cf08d57d5ada7522d588064
sha1: 54c760c95c00134b1c7b614bc49c107e639c7dcc
sha256: c3179c85de08ce7273e74f38c41bd63ebbb2c0feac7e6399c12680f4ce9df760
sha512: 35fec8b68adc7bc238d2ce4648d38dccc501414ccc20a04509320271b515c626920b7aca72e23433be2a426a7907486da22a9566ecbdaccf68644d4f5782b872
ssdeep: 12288:JLaAqsyVNFYLi7N7FTelEN1Sye1rG60Ja1y/:taH1NjJleTy560JB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1799423A4B6EE7560D295833FB5C3E40DC187B835A76009BC8A453FDD6604EC9E732267
sha3_384: 78f098f2e5d0285cf183498ff5b2248684eb4e4220d6889f071e7bc89f2a06b173fae8b9b709b352b3e409040554c1fe
ep_bytes: 558bec81ec2401000068003c50ad6a35
timestamp: 2011-06-21 21:31:46

Version Info:
CompanyName: Masnesaft Corporation
FileDescription: Masnesaft Visual Studie 2010
FileVersion: 1.9.43074.5121 built by: SP1Rel
InternalName: devenv.exe
LegalCopyright: © Masnesaft Corporation. All rights reserved.
OriginalFilename: devenv.exe
ProductName: Masnesaft® Visual Studio® 2010
ProductVersion: 1.9.43074.5121
Translation: 0x0409 0x04b0

Symmi.44378 also known as:

How to remove Symmi.44378?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.