Categories: Malware

How to remove “Symmi.85475”?

The Symmi.85475 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.85475 virus can do?

Creates RWX memory
A process attempted to delay the analysis task.
At least one IP Address, Domain, or File Name was found in a crypto call
Reads data out of its own binary image
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Tries to unhook or modify Windows functions monitored by Cuckoo

Related domains:

w.eydata.net

How to determine Symmi.85475?


File Info:
crc32: 0989049Emd5: 736485de38407310f4fe79ec08d4f785name: 736485DE38407310F4FE79EC08D4F785.mlwsha1: 36be4f6cbc0329a5ec0842713a24f67fa4e5d7c2sha256: c99183ded90f4c0487aa0eefbdce09a52fa094193a07ec59091bd73b1e854ffcsha512: b83d9f91c500166645373d604b9722d3d13f099c94f1b63e1efddef70fe1830524720086f1ab1e9ad448c4e9b22dee5f9992cef6d9a8e550f8cbea459fb3e359ssdeep: 49152:ngfgwQTlG4ntjVZI+s8KuqGaX0ToIBAUZLYTa6jn:gIwQTlG4t/bJBAUZLYawntype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Verification system x7248x6743x6240x6709FileVersion: 1.0.0.0CompanyName: Verification systemComments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.dywt.com.cn)ProductName: Verification systemProductVersion: 1.0.0.0FileDescription: Verification systemTranslation: 0x0804 0x04b0

Symmi.85475 also known as:

K7AntiVirus	Trojan ( 005246d51 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen15.41633
ClamAV	Win.Malware.Gotango-7000352-0
CAT-QuickHeal	Ransom.Genasom.16527
ALYac	Gen:Variant.Symmi.85475
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.e38407
Cyren	W32/Trojan.CLL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Symmi.85475
MicroWorld-eScan	Gen:Variant.Symmi.85475
Tencent	Win32.Trojan.Suspicious.Agbc
Ad-Aware	Gen:Variant.Symmi.85475
Sophos	Generic PUA DG (PUA)
Comodo	TrojWare.Win32.Agent.OSCF@5rs7jr
BitDefenderTheta	Gen:NN.ZexaF.34294.Fs3@aal6avcb
McAfee-GW-Edition	BehavesLike.Win32.BadFile.vh
FireEye	Generic.mg.736485de38407310
Emsisoft	Gen:Variant.Symmi.85475 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/AD.CoinMiner.pmxfu
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASCommon.FA
Microsoft	Trojan:Script/Phonzy.A!ml
GData	Win32.Application.PUPStudio.B
AhnLab-V3	Malware/Gen.RL_Reputation.R361874
Acronis	suspicious
McAfee	Artemis!736485DE3840
MAX	malware (ai score=87)
VBA32	BScope.Trojan.Swizzor
Malwarebytes	Trojan.FlyStudio
TrendMicro-HouseCall	TROJ_GEN.R035H0CKH21
Rising	Malware.Heuristic!ET#98% (RDMK:cmRtazoqD4lpEhDw37kAdtTFMbxP)
Ikarus	Trojan-Downloader
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.65CA!tr
AVG	Win32:Malware-gen