Symmi.63254 removal instruction

The Symmi.63254 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Symmi.63254 virus can do?

Possible date expiration check, exits too soon after checking local time
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Symmi.63254?


File Info:
crc32: 504A2FD1
md5: 99159ae187aa892c21149b2c0ce6eb5f
name: 99159AE187AA892C21149B2C0CE6EB5F.mlw
sha1: 40bb033957e0f7d26b42617d1d56ad0a992eb29e
sha256: c4b506801df688d3715325013b03bf8e9df016e2cea01d2b857d47531a7201d9
sha512: 63db50d5d5438e79fabd2f2a4678e2fe5928a951c32e44afcceddcabf8e0fa618656a9f56a89c41bc7e4abed3ac9e16491e2eef817e15e023bdcf7b9939ed49a
ssdeep: 6144:r9zZnrF53SJUN8K8z3BIsJVwQ/J07PZgz+pzJyg4ZQnacf1v7qv2v73ufstnFed:r91raxz3dXJGm0ztSpPNu8WAm0Vw1
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: FXSSVC.EXE
FileVersion: 6.1.7601.17514 (win7sp1_rtm.101119-1850)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7601.17514
FileDescription: Fax Service
OriginalFilename: FXSSVC.EXE
Translation: 0x0409 0x04b0

Symmi.63254 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	W32.Virut.G
ALYac	Gen:Variant.Symmi.63254
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Cybereason	malicious.187aa8
Cyren	W32/Virut.D.gen!Eldorado
APEX	Malicious
Avast	Win32:Vitro [Inf]
BitDefender	Gen:Variant.Symmi.63254
MicroWorld-eScan	Gen:Variant.Symmi.63254
Ad-Aware	Gen:Variant.Symmi.63254
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34266.Fu0@aeXuX1di
FireEye	Generic.mg.99159ae187aa892c
Emsisoft	Gen:Variant.Symmi.63254 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/Patched.Ren
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Symmi.DF716
GData	Gen:Variant.Symmi.63254
Acronis	suspicious
McAfee	Artemis!99159AE187AA
MAX	malware (ai score=88)
Rising	Malware.Heuristic!ET#88% (RDMK:cmRtazrrjQCQyMq2lIWt+ZYGJ7Ip)
Ikarus	Trojan.Patched
Fortinet	W32/CoinMiner.F
AVG	Win32:Vitro [Inf]

How to remove Symmi.63254?

Symmi.63254 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X