Malware

Symmi.87264 (B) information

Malware Removal

The Symmi.87264 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Symmi.87264 (B) virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Reads data out of its own binary image
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Creates a hidden or system file
  • Creates a slightly modified copy of itself
  • Anomalous binary characteristics

Related domains:

ns1.player1253.com
ns1.videoall.net
ns1.mediashares.org

How to determine Symmi.87264 (B)?


File Info:

crc32: 1915CCEC
md5: b1dcace36b95c91bf1d5579ff76e390c
name: B1DCACE36B95C91BF1D5579FF76E390C.mlw
sha1: 32b81b7e3b884a3adec9fabcc83d537bf5c885e0
sha256: 949c09be47f13e94491dba0cb604150a3b6ac2f587593762bfc7c08e0b20b633
sha512: 3bd2f4023fcb4dafbd493761c3b7c86c65f2158681c1ce3e7919502f503e229cba44cec8eee11f0ce4ca2d5e5962076b488be800cc1ac33edaf606d01b9445f0
ssdeep: 1536:NeGuQ4IjW2wn4h17HxxVEFSQAJs8m9RERgRcRHRQRZkjjE3JGX2WGH4dFkSJLMk:YGMsju27x+FlA2wgZ5z4Ct
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
ProductVersion: 8.11
InternalName: OUHcsPPgWU
FileVersion: 8.11
OriginalFilename: OUHcsPPgWU.exe
ProductName: HVkyeuoQPN

Symmi.87264 (B) also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Symmi.87264
FireEyeGeneric.mg.b1dcace36b95c91b
CAT-QuickHealWorm.WBNA
ALYacGen:Variant.Symmi.87264
CylanceUnsafe
VIPRELooksLike.Win32.Malware!vb (v)
AegisLabTrojan.Win32.VBKrypt.lkoQ
SangforMalware
K7AntiVirusTrojan-Downloader ( 001ff72a1 )
BitDefenderGen:Variant.Symmi.87264
K7GWTrojan-Downloader ( 001ff72a1 )
Cybereasonmalicious.36b95c
BitDefenderThetaAI:Packer.449EDA4520
CyrenW32/Vobfus.O.gen!Eldorado
SymantecW32.Changeup!gen10
ESET-NOD32a variant of Win32/AutoRun.VB.ABG
TrendMicro-HouseCallWORM_VOBFUS.SMIA
AvastWin32:VB-RJU [Trj]
ClamAVWin.Trojan.Changeup-6169544-0
KasperskyWorm.Win32.WBNA.ipa
AlibabaWorm:Win32/Vobfus.7d3cf500
NANO-AntivirusTrojan.Win32.WBNA.dxfvpe
ViRobotTrojan.Win32.A.VBKrypt.106496.BQ
Ad-AwareGen:Variant.Symmi.87264
SophosML/PE-A + Mal/SillyFDC-C
F-SecureTrojan.TR/Dorifel.aqsza
DrWebTrojan.DownLoader2.13869
TrendMicroWORM_VOBFUS.SMIA
McAfee-GW-EditionBehavesLike.Win32.VBObfus.cm
EmsisoftGen:Variant.Symmi.87264 (B)
SentinelOneStatic AI – Malicious PE – Worm
JiangminTrojan/Jorik.gnih
AviraTR/Dorifel.aqsza
MAXmalware (ai score=87)
Antiy-AVLWorm/Win32.WBNA.gen
MicrosoftWorm:Win32/Vobfus.gen!U
ArcabitTrojan.Symmi.D154E0
SUPERAntiSpywareTrojan.Agent/Gen-Frauder
AhnLab-V3Win-Trojan/VBKrypt.Gen
ZoneAlarmWorm.Win32.WBNA.ipa
GDataGen:Variant.Symmi.87264
CynetMalicious (score: 100)
TotalDefenseWin32/Vobfus.F!generic
McAfeeVBObfus.f
VBA32Trojan.VBRA.0707
MalwarebytesGeneric.Trojan.Malicious.DDS
APEXMalicious
RisingWorm.Autorun!1.99ED (CLASSIC)
YandexTrojan.GenAsa!QU2XOJneHI0
IkarusTrojan.Win32.VBKrypt
FortinetW32/AutoRun.XM!worm
AVGWin32:VB-RJU [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/QVM03.0.0844.Malware.Gen

How to remove Symmi.87264 (B)?

Symmi.87264 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment