Malware

How to remove “Symmi.8967 (B)”?

Malware Removal

The Symmi.8967 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Symmi.8967 (B) virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid

How to determine Symmi.8967 (B)?


File Info:

name: 3DA9861B30FE979B3124.mlw
path: /opt/CAPEv2/storage/binaries/9707c33f044d6c02b2ab783497f37744dbf62580222bedb0167c5e4fe39a7456
crc32: 1D6EED42
md5: 3da9861b30fe979b3124b4cd2ad7ff44
sha1: 0aec3c70b799c763392018f5fcae650c0aaecf7f
sha256: 9707c33f044d6c02b2ab783497f37744dbf62580222bedb0167c5e4fe39a7456
sha512: 66d149861747914ea279192e9588e8db91cf2c4604e99fd7c5e74d210bcd67b00e96fbf4609a1dc9293aab26ac49048ecd35b6f9655437fec30a46a28fb9db41
ssdeep: 192:YqtkAO3ejPZkWs6bngpKsV4zQiiEbZdCFIXWu8GLdbX/oVUMMg7Pu6Xf/BLtx:YkkAORuLgl9ebS3u8GxL/MUQ2ej
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T103E2C026775C74F9E0FDB5B0F2AED5D5B082AB76DDC002E19662C96374670640037E42
sha3_384: 73069b54dffdb1a385af2ed0b73b5f14738210f29b5330763ee2f50a49305378995cf2c67bb91c62d8bbb5f1655dd7fb
ep_bytes: 6ae8000000005d81c57702000055eb0b
timestamp: 2002-02-10 13:15:37

Version Info:

0: [No Data]

Symmi.8967 (B) also known as:

BkavW32.SalDropv3.Worm
LionicHeuristic.File.Generic.00×1!p
AVGWin32:Sality-RCX [Drp]
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Symmi.8967
FireEyeGeneric.mg.3da9861b30fe979b
CAT-QuickHealTrojan.Hello.A1
McAfeeW32/Sality.dr
CylanceUnsafe
VIPREGen:Variant.Symmi.8967
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 001cddbb1 )
AlibabaMalware:Win32/km_2a8b77.None
K7GWTrojan ( 001cddbb1 )
CrowdStrikewin/malicious_confidence_100% (W)
BaiduWin32.Trojan.Sality.p
VirITWin32.Sality-Drp.B
CyrenW32/Sality.C.gen!Eldorado
SymantecW32.Sality!dr
ESET-NOD32Win32/Sality
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Virus.Sality-1067
KasperskyHEUR:Packed.Win32.BadCrypt.gen
BitDefenderGen:Variant.Symmi.8967
NANO-AntivirusHeuristic.Win32.CorruptedFile.lcrsv
SUPERAntiSpywareTrojan.Agent/Gen-FraudPack
AvastWin32:Sality-RCX [Drp]
TencentTrojan.Win32.SalityStub.a
Ad-AwareGen:Variant.Symmi.8967
SophosML/PE-A + Troj/SalLoad-C
ComodoWin32.Kashu.RA@1ygt6m
DrWebTrojan.Damaged.3
TrendMicroTROJ_GEN.R002C0OIA22
McAfee-GW-EditionBehavesLike.Win32.Generic.nz
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Symmi.8967 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Symmi.8967
JiangminTrojan/Inject.lrc
WebrootW32.Sality.Gen
AviraTR/Dropper.Gen
MAXmalware (ai score=88)
Antiy-AVLTrojan/Generic.ASVirus.2C9
ArcabitTrojan.Symmi.D2307
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
BitDefenderThetaGen:NN.ZexaCO.34646.ceY@aqLG4X
ALYacGen:Variant.Symmi.8967
MalwarebytesTrojan.MalPack.Gen
TrendMicro-HouseCallTROJ_GEN.R002C0OIA22
RisingTrojan.Win32.KUKU.a (CLASSIC)
YandexTrojan.DR.Sality.Gen
IkarusVirus.Win32.Sality
MaxSecureTrojan.LordPE
FortinetW32/LPECrypt.A!tr
Cybereasonmalicious.b30fe9
PandaW32/Sality.AK.drp

How to remove Symmi.8967 (B)?

Symmi.8967 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment