Categories: Malware

Symmi.56393 removal tips

The Symmi.56393 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.56393 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Yara rule detections observed from a process memory dump/dropped files/CAPE
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Chinese
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Symmi.56393?


File Info:
name: 79D865F1BA7E0B196B68.mlwpath: /opt/CAPEv2/storage/binaries/be912d0de35241a0e1d75ab2906d09a6cbe67771ee43d10923fb46a976620dafcrc32: 1505FE5Amd5: 79d865f1ba7e0b196b685e95370be5e1sha1: 0b6a87c4062622fee52cb5146e46f1e193ee38dcsha256: be912d0de35241a0e1d75ab2906d09a6cbe67771ee43d10923fb46a976620dafsha512: a2747ed33ea6ed5b7fd8ccf30100a400cfb2ff98867a315550f37bec3332504996b1a370a91339f1dc060617d0aa21b07bd259c65cfe1adb7e407b84da42f806ssdeep: 6144:cPUDpE/Q7YOh6reRNVs6rUc5fPsrrqds9dqKhEF3:GUlQQ77Qms6z8rrqu81type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12294F12AF7D57831EBEED3B347D3D8BD451B9001126338AF298A07C888497A47F3655Asha3_384: 09be0aa158b6a67c3866a747b67c94a04c6e17371a3b43a4002af75a288324334bcde6925f795d7016651b1ed621d34dep_bytes: 558bec81ec94010000bac40000008995timestamp: 2012-04-03 01:25:14
Version Info:
CompanyName: Maskasaft CorporationFileDescription: Maskasaft Visual Studie 2010FileVersion: 1.9.43074.5121 built by: SP1RelInternalName: devenv.exeLegalCopyright: © Maskasaft Corporation. All rights reserved.OriginalFilename: devenv.exeProductName: Maskasaft® Visual Studio® 2010ProductVersion: 1.9.43074.5121Translation: 0x0409 0x04b0

Symmi.56393 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Heuristic.File.Generic.00×1!p
MicroWorld-eScan	Gen:Variant.Symmi.56393
ClamAV	Win.Trojan.Agent-1142043
FireEye	Generic.mg.79d865f1ba7e0b19
CAT-QuickHeal	FraudTool.Security
McAfee	PWSZbot-FBTA!79D865F1BA7E
Cylance	Unsafe
Zillya	Backdoor.PePatch.Win32.39158
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.1ba7e0
Baidu	Win32.Trojan.Kryptik.je
VirIT	Trojan.Win32.Zbot.LWT
Cyren	W32/A-b528930d!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.CHLN
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Packed.Win32.Katusha.o
BitDefender	Gen:Variant.Symmi.56393
NANO-Antivirus	Trojan.Win32.Katusha.dcuezx
SUPERAntiSpyware	Trojan.Agent/Gen-FalComp
Avast	Win32:MalOb-HX [Cryp]
Rising	Stealer.Zbot!8.109D7 (TFE:2:KQFyJ8IObjU)
Ad-Aware	Gen:Variant.Symmi.56393
TACHYON	Trojan/W32.Katusha.431813
Emsisoft	Gen:Variant.Symmi.56393 (B)
Comodo	TrojWare.Win32.PWS.Zbot.HC@5rvxmh
DrWeb	Trojan.Siggen6.15132
VIPRE	Gen:Variant.Symmi.56393
TrendMicro	TSPY_ZBOT.SMZH
McAfee-GW-Edition	PWSZbot-FBTA!79D865F1BA7E
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A + Troj/Agent-AIDA
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Symmi.56393
Jiangmin	Packed.Win32.Katusha.f
Avira	TR/Crypt.XPACK.Gen7
Antiy-AVL	Trojan/Generic.ASMalwS.57
Arcabit	Trojan.Symmi.DDC49
Microsoft	PWS:Win32/Zbot
Google	Detected
AhnLab-V3	Trojan/Win32.ZBot.R114000
VBA32	BScope.TrojanPSW.Zbot
ALYac	Gen:Variant.Symmi.56393
MAX	malware (ai score=86)
Malwarebytes	Trojan.Zbot.Gen
TrendMicro-HouseCall	TSPY_ZBOT.SMZH
Tencent	Trojan.Win32.Zbot.d
Yandex	Trojan.Kryptik!snlyUOw+G9w
Ikarus	Trojan.Zbot
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.CGEJ!tr
BitDefenderTheta	Gen:NN.ZexaF.34646.Au1@auF16ahG
AVG	Win32:MalOb-HX [Cryp]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (W)