Categories: Malware

About “Symmi.65167” infection

The Symmi.65167 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.65167 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Symmi.65167?


File Info:
name: 04B9411CBEACF6BF142E.mlwpath: /opt/CAPEv2/storage/binaries/e24155b0ff33892c7ab358406d6112c8c12e5f0c493755040172b379fc75bb4acrc32: 4290F6C0md5: 04b9411cbeacf6bf142ea7d7c97d3bb5sha1: 0ac751ee19b868a1c6f5bc9c0cbd25d164e6784csha256: e24155b0ff33892c7ab358406d6112c8c12e5f0c493755040172b379fc75bb4asha512: b0db7d52dc455815699261b95485f6bc483210abce6484a91c849cad147fe1c541b9119dd25dc9c615182657dfd0f1e025e15ae610afdfad4297a6de41c56c4cssdeep: 3072:jLmb0cptOUC3sLn/bWUVwyNwkz3qWD0nrqXr:jqIcptzCcLn/bWAnNw4gnrqXtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FF14F013CBE60512D1E736B0057748570770FDA2EB6C6A5B3B4C3A8E6F3629B606431Esha3_384: 81167da08f0057a93dc610745af4fa11d0d4242203fddb483452de83ad48c8900ebd18cbf33468668940c21f407784f7ep_bytes: 558bec6aff6898404000680820400064timestamp: 2003-01-29 08:03:23
Version Info:
CompanyName: Ink, Soaxiyee AiacFileDescription: Uneea. OdoFileVersion: 3.2.600.5500InternalName: Non. NcLegalCopyright: iliqoant subapence 1992 - 2011OriginalFilename: infoooir.exeProductName: CkfduawProductVersion: 3.2.600.5500Translation: 0x0409 0x04b0

Symmi.65167 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Symmi.65167
FireEye	Generic.mg.04b9411cbeacf6bf
CAT-QuickHeal	Trojan.Rimecud.U
McAfee	PWS-Zbot.gen.aqp
Cylance	Unsafe
VIPRE	Gen:Variant.Symmi.65167
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 004bcce41 )
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.cbeacf
BitDefenderTheta	Gen:NN.ZexaF.34646.lm0@aSbwzAei
Cyren	W32/Rimecud.AO.gen!Eldorado
Symantec	W32.Pilleuz!gen40
ESET-NOD32	a variant of Win32/Kryptik.EMWA
APEX	Malicious
Kaspersky	HEUR:Worm.Win32.Generic
BitDefender	Gen:Variant.Symmi.65167
NANO-Antivirus	Trojan.Win32.Kazy.bzarad
SUPERAntiSpyware	Trojan.Agent/Gen-Cryptic
Avast	FileRepMalware [Trj]
Ad-Aware	Gen:Variant.Symmi.65167
Emsisoft	Gen:Variant.Symmi.65167 (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
TrendMicro	WORM_REMECUD.SMU
McAfee-GW-Edition	PWS-Zbot.gen.aqp
Trapmine	malicious.high.ml.score
Sophos	Mal/EncPk-AFU
SentinelOne	Static AI – Malicious PE
Jiangmin	Worm/Generic.ucf
Google	Detected
Avira	TR/Kazy.62682.5
MAX	malware (ai score=86)
Kingsoft	Win32.HeurC.KVM007.a.(kcloud)
Microsoft	Trojan:Win32/IStartSurf.LF!MTB
GData	Gen:Variant.Symmi.65167
Cynet	Malicious (score: 100)
AhnLab-V3	Worm/Win32.Rimecud.R49550
Acronis	suspicious
VBA32	BScope.Trojan.Dorv
ALYac	Gen:Variant.Symmi.65167
Malwarebytes	Malware.Heuristic.1003
TrendMicro-HouseCall	WORM_REMECUD.SMU
Rising	Trojan.Bulta!8.35D (CLOUD)
Ikarus	Virus.Win32.Virut
Fortinet	W32/Zbot.XS!tr
AVG	FileRepMalware [Trj]
Panda	Trj/Rimecud.f
CrowdStrike	win/malicious_confidence_100% (W)