What is “Symmi.55587”?

The Symmi.55587 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Symmi.55587 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Symmi.55587?


File Info:
crc32: A731FFDB
md5: b36a4fed239987cdc9db40d33ffda873
name: B36A4FED239987CDC9DB40D33FFDA873.mlw
sha1: 0a63a981258c9c8449e74be775aa39c58243e57f
sha256: 1dd0937021076bb01c150795f5836a7e9f9d41578ac0c764ba9f5360c4f3af7a
sha512: eb22cc78839e4fb5f397b966e1a6aa70336e6215b77a07fb98ed630839f2647a281f4109c5a4b3dfe66a378710f9ac288fb5f2e589e35125ff33d916bb3a6954
ssdeep: 6144:ACtziTUOlPZxOMuimgGpPufW46xpTScM+AwuXT:ACUIOlPZxO8mgSPwYpTSso
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2014 KYOCERA Document Solutions Inc.
InternalName: Installer
FileVersion: 1, 2, 24, 15
CompanyName: KYOCERA Document Solutions Inc.
SpecialBuild: KXWeb6.2vup
ProductName: Installer
ProductVersion: 1.2.2415.1
FileDescription: Installer
OriginalFilename: PostCore.exe
Translation: 0x0409 0x04b0

Symmi.55587 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Virus.Win32.Symmi.n!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Symmi.55587
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (D)
Cybereason	malicious.d23998
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Sality [Inf]
BitDefender	Gen:Variant.Symmi.55587
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
MicroWorld-eScan	Gen:Variant.Symmi.55587
Tencent	Win32.Trojan.Patched.Pdvu
Ad-Aware	Gen:Variant.Symmi.55587
Sophos	ML/PE-A
Comodo	Malware@#aqnn96mg7hnh
BitDefenderTheta	Gen:NN.ZexaF.34266.qq0@aaLS!Vgi
VIPRE	Virus.Win32.Sality.atbh (v)
TrendMicro	PE_SALITY.ER
McAfee-GW-Edition	BehavesLike.Win32.Emotet.dh
FireEye	Generic.mg.b36a4fed239987cd
Emsisoft	Gen:Variant.Symmi.55587 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Symmi.DD923
GData	Gen:Variant.Symmi.55587
Acronis	suspicious
McAfee	Artemis!B36A4FED2399
MAX	malware (ai score=85)
TrendMicro-HouseCall	PE_SALITY.ER
Rising	Malware.Heuristic!ET#77% (RDMK:cmRtazpJRh2TjZMBOq6vmBtu/VuT)
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Sality [Inf]
Paloalto	generic.ml

How to remove Symmi.55587?

Symmi.55587 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X