Categories: Malware

Symmi.63525 removal tips

The Symmi.63525 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.63525 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Symmi.63525?


File Info:
crc32: 7EA276B9md5: f973e86264278be82fd87fd69b9f0105name: F973E86264278BE82FD87FD69B9F0105.mlwsha1: fcca8af3be5c5fc0ec364ee504a88dd54f1bcb9asha256: b0f8c7161212b06f357440941a3042fb33da3dd5f22920676499511f012a3063sha512: a58da641483482baf780bee221d65d909721547e01691a06acb779f8d0b444b65b06cb76063dc84c9374fd42b5f933005ac9fab2b9271594cb490e90840409a1ssdeep: 3072:qaa93i3y8E+rGWEbKKOVlqpUWCkBcTjMU++aMkyj49VkIP:qjd3ann0type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0409 0x04b0LegalCopyright: kosquagm xalytmfezwaInternalName: kgFileVersion: 27.02.0005CompanyName: qLegalTrademarks: pylinhr bdzcdpjuifComments: gjvubmayProductName: niProductVersion: 27.02.0005FileDescription: drOriginalFilename: kg.exe

Symmi.63525 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
FireEye	Generic.mg.f973e86264278be8
CAT-QuickHeal	TrojanRansom.PornoBlocker
McAfee	Artemis!F973E8626427
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.PornoBlocker.j!c
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0055e3e61 )
BitDefender	Gen:Variant.Symmi.63525
K7GW	Trojan ( 0055e3e61 )
Cybereason	malicious.264278
Cyren	W32/VBInject.1!Generic
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.PornoBlocker.aakl
Alibaba	Ransom:Win32/PornoBlocker.93173c53
NANO-Antivirus	Trojan.Win32.Delf.ecamer
MicroWorld-eScan	Gen:Variant.Symmi.63525
Rising	Ransom.PornoBlocker!8.24E (C64:YzY0Ok0+X53QC3Q9)
Ad-Aware	Gen:Variant.Symmi.63525
Sophos	Mal/Generic-R + Mal/VBCheMan-C
Comodo	Malware@#1u8bz65ojcc7s
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.Inject2.32376
Zillya	Trojan.Delf.Win32.73296
McAfee-GW-Edition	BehavesLike.Win32.Trojan.ft
Emsisoft	Gen:Variant.Symmi.63525 (B)
Ikarus	Trojan-Dropper.SuspectCRC
Jiangmin	Trojan.PornoBlocker.q
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.AGeneric
Microsoft	Trojan:Win32/Dynamer!ac
Arcabit	Trojan.Symmi.DF825
ZoneAlarm	Trojan-Ransom.Win32.PornoBlocker.aakl
GData	Gen:Variant.Symmi.63525
BitDefenderTheta	AI:Packer.F74EC0DF20
ALYac	Gen:Variant.Symmi.63525
MAX	malware (ai score=100)
VBA32	Hoax.PornoBlocker
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/CI.A
ESET-NOD32	Win32/Delf.QAI
Tencent	Win32.Trojan.Pornoblocker.Eegx
Yandex	Trojan.GenAsa!bEcikRmUgZ0
SentinelOne	Static AI – Suspicious PE
eGambit	Generic.Malware
Fortinet	W32/VBKrypt.CZLQ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Ransom.PornoBlocker.HwMAWFMA