Malware

Should I remove “Symmi.6102”?

Malware Removal

The Symmi.6102 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Symmi.6102 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Queries information on disks, possibly for anti-virtualization
  • Checks the version of Bios, possibly for anti-virtualization
  • Anomalous binary characteristics

How to determine Symmi.6102?



File Info:

crc32: 17AB259F
md5: c74fec2937745a84599452dbec0e08b4
name: C74FEC2937745A84599452DBEC0E08B4.mlw
sha1: 0e8a69374b9f36171cee5547d27bde81c371d753
sha256: dfb4be58d9c43f53bc2a484dfe4f8299f68de5ed5b15cbadc4ea3538b2ee8624
sha512: 1e9b6e9e1e130af97a547b75adb32744665bc8316283bf54bcd2731ecf72a0de03e75a8033f36a93cda1253badc2b4a4ee547dc9f46b5cf1a024ab56646921ca
ssdeep: 12288:Q+mC6H5jZoWE7IyxYAxS3Rp047c5VOuwCJ+No0ik+IC71qVNS:Q+mPnPE7IwYySb7AOHCJ+uA+dcVNS
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: x7248x6743x6240x6709 (C) 2010
InternalName: x9b54x517dIDx63d0x53d6x5668x7b2cx4e8cx7248
FileVersion: 2, 0, 3, 3
CompanyName: 
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: x9b54x517dIDx63d0x53d6x5668x7b2cx4e8cx7248 x5e94x7528x7a0bx5e8f
SpecialBuild: 
ProductVersion: 2, 0, 3, 3
FileDescription: x9b54x517dIDx63d0x53d6x5668x7b2cx4e8cx7248
OriginalFilename: x9b54x517dIDx63d0x53d6x5668x7b2cx4e8cx7248.EXE
Translation: 0x0804 0x04b0

Symmi.6102 also known as:

K7AntiVirusTrojan ( 005239691 )
LionicDangerousObject.Multi.Generic!c
MicroWorld-eScanGen:Variant.Symmi.6102
CAT-QuickHealTrojan.IGENERIC
ALYacGen:Variant.Symmi.6102
CylanceUnsafe
CrowdStrikemalicious_confidence_100% (D)
K7GWTrojan ( 005239691 )
Cybereasonmalicious.937745
TrendMicroTROJ_GEN.R002C0PFU18
BaiduWin32.Trojan.WisdomEyes.16070401.9500.9563
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
CyrenW32/Trojan.XNBW-2567
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.NoobyProtect.B suspicious
AvastWin32:Malware-gen
GDataGen:Variant.Symmi.6102
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Symmi.6102
BabableMalware.HighConfidence
TencentWin32.Trojan.Gen.Sxoh
Ad-AwareGen:Variant.Symmi.6102
SophosMal/Generic-S
F-SecureGen:Variant.Symmi.6102
DrWebTrojan.MulDrop5.56772
VIPRELooksLike.Win32.Urausy.b (v)
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Malware.bc
EmsisoftGen:Variant.Symmi.6102 (B)
SentinelOnestatic engine – malicious
Endgamemalicious (high confidence)
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1013905
MicrosoftTrojan:Win32/Tiggre!rfn
ZoneAlarmUDS:DangerousObject.Multi.Generic
McAfeeTrojan-FDFO!C74FEC293774
AVwareLooksLike.Win32.Urausy.b (v)
MAXmalware (ai score=80)
TrendMicro-HouseCallTROJ_GEN.R002C0PFU18
RisingTrojan.Generic!8.C3 (CLOUD)
YandexRiskware.NoobyProtect!
IkarusTrojan.Win32.Sasfis
FortinetW32/SfEngine.A!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Symmi.6102?

Symmi.6102 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment