Categories: Malware

About “Symmi.78955” infection

The Symmi.78955 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.78955 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Expresses interest in specific running processes
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Tries to unhook or modify Windows functions monitored by Cuckoo
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Symmi.78955?


File Info:
crc32: B4D1479Emd5: 940febd85e748bcc6629fd020837154ename: pubg_inject_foxycheatz.exesha1: 3120461651a55d2f4b72f122ab7f80627b7f318asha256: dc438f1d3a089597a5ca2d40ffe5af34be5dc063fe9a531021af2ecec9c3a41bsha512: 92c1decaa8d44a6f87a9ac0d8c05e58737fbd49a0e8767b8d5e43fedc4dc444ab19b2f1f2d34bcf438bfc87b82410c8bef1478dfb8a8b74501e3bd178de7fb1dssdeep: 12288:/znjyMa6DDr620petMTVLkSpGvBd+0RZ+niO9Pl5GWFCwn8uKKF0X7s8mcBVJRMx:/f5XYaHZM0+n/7ZK2cjjqPtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Symmi.78955 also known as:

MicroWorld-eScan	Gen:Variant.Symmi.78955
McAfee	Trojan-FOEL!940FEBD85E74
Cylance	Unsafe
Zillya	Backdoor.SpyGate.Win32.3210
K7AntiVirus	Trojan ( 0051a4911 )
K7GW	Trojan ( 0051a4911 )
Arcabit	Trojan.Symmi.D1346B
TrendMicro	TSPY_FAREIT.SMBD3
NANO-Antivirus	Trojan.Win32.Dwn.euolxg
Symantec	Infostealer.Lokibot!13
TrendMicro-HouseCall	TSPY_FAREIT.SMBD3
Avast	Win32:Malware-gen
GData	Gen:Variant.Symmi.78955
Kaspersky	Trojan.MSIL.Crypt.fega
BitDefender	Gen:Variant.Symmi.78955
AegisLab	Troj.Msil.Crypt!c
Rising	Backdoor.Androm!8.113 (TFE:5:sRfrv2cJHiB)
Ad-Aware	Gen:Variant.Symmi.78955
Emsisoft	Gen:Variant.Symmi.78955 (B)
Comodo	UnclassifiedMalware
F-Secure	Gen:Variant.Symmi.78955
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Fareit.tc
Sophos	Mal/Fareit-P
Ikarus	Trojan.Win32.Injector
Cyren	W32/GenBl.940FEBD8!Olympus
Jiangmin	Backdoor.MSIL.uxj
Avira	HEUR/AGEN.1004295
MAX	malware (ai score=99)
Antiy-AVL	Trojan/Win32.Miner
Microsoft	Trojan:Win32/Tiggre!rfn
Endgame	malicious (high confidence)
ZoneAlarm	Trojan.MSIL.Crypt.fega
ALYac	Gen:Variant.Symmi.78955
AVware	Trojan.Win32.Generic!BT
VBA32	TScope.Trojan.Delf
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.DSXV
Tencent	Msil.Trojan.Crypt.Hqbn
Yandex	Trojan.Crypt!inLStKei2O8
SentinelOne	static engine – malicious
Fortinet	W32/Injector.DTAQ!tr
AVG	Win32:Malware-gen
Cybereason	malicious.85e748
Paloalto	generic.ml
CrowdStrike	malicious_confidence_100% (D)