Should I remove "Symmi.87281"?

The Symmi.87281 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.87281 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Installs an hook procedure to monitor for mouse events
Sniffs keystrokes
A process attempted to delay the analysis task by a long amount of time.
Installs itself for autorun at Windows startup
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

hi.———-.com

ad.———-.com

How to determine Symmi.87281?


File Info:
crc32: F53BF15A
md5: 4fe6a78b3acc6e4f636891bc5e4bd982
name: 4FE6A78B3ACC6E4F636891BC5E4BD982.mlw
sha1: d7f76fe8d5529a535885b1a34045790b3c74b37d
sha256: c2c66ec47fc9c969de74cbb8ae050243e5c51e8033811cb04bd3b975d0037d1b
sha512: ea313e8e2de3c3467b1b0aa2752cd7c6e53e7e7df7a64935035e012fe4904e64f8f391d30ebc8dfb268cd886f7855b0d2fa88915a1b502a946fd16588d4bca21
ssdeep: 98304:Xg1glG4ajy2toG3AMzo3kDS0TD8QqKiuW3Am1HF3F/DudFUy6pmTK:X84H0jBigCD2FAm+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C) vrBrothers Corporation. All rights reserved.
InternalName: MyMacro
FileVersion: 2014.0.0.14006
CompanyName: vrBrothers Corporation. 
Comments: QMacro's macro runner.
ProductName: QMacro
ProductVersion: 2014.0.0.14006
FileDescription: QMacro's macro runner.
OriginalFilename: mymacro.exe
Translation: 0x0804 0x04b0

Symmi.87281 also known as:

K7AntiVirus	Adware ( 004dc08e1 )
MicroWorld-eScan	Gen:Variant.Symmi.87281
CAT-QuickHeal	Trojan.Sufbotool
ALYac	Gen:Variant.Symmi.87281
Cylance	Unsafe
CrowdStrike	malicious_confidence_70% (D)
K7GW	Adware ( 004dc08e1 )
Cybereason	malicious.b3acc6
NANO-Antivirus	Trojan.Win32.KeyLogger.efappw
Cyren	W32/S-429fb67f!Eldorado
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/Adware.VrBrothers.AF potentially unwanted
Avast	Win32:Evo-gen [Susp]
Kaspersky	Trojan.Win32.Sufbotool.waj
BitDefender	Gen:Variant.Symmi.87281
Tencent	Win32.Trojan.Sufbotool.Piug
Ad-Aware	Gen:Variant.Symmi.87281
Sophos	Mal/Generic-S
DrWeb	Trojan.KeyLogger.22407
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.PUP.rh
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Symmi.87281 (B)
SentinelOne	static engine – malicious
GData	Win32.Adware.VrBrothers.C
Endgame	malicious (high confidence)
Webroot	W32.Backdoor.Pcclient
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Symmi.D154F1
ZoneAlarm	Trojan.Win32.Sufbotool.waj
TACHYON	Trojan/W32.Sufbotool.4870144
McAfee	Artemis!4FE6A78B3ACC
MAX	malware (ai score=85)
Malwarebytes	Adware.VrBrothers
Rising	Downloader.Banload!8.15B (RDM+:cmRtazqBOcls7RtWmEuRzp/zLB+a)
Yandex	PUA.VrBrothers!
eGambit	Unsafe.AI_Score_99%
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.BO.024

How to remove Symmi.87281?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Symmi.87281”?