Categories: Malware

Should I remove “Symmi.90467”?

The Symmi.90467 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.90467 virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Creates a hidden or system file
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Symmi.90467?


File Info:
crc32: 6A34DB0Emd5: 56b30f45968d577c80c284f172f95816name: 56B30F45968D577C80C284F172F95816.mlwsha1: 1b32a02daa197195de52fa565c7966c4c03cb245sha256: 825ef6c6c1dc457fdf4f13ff106772884f8ecf58babb3686c41761a9fbddba7dsha512: 6d3525bc3084f64023d7d2c98033a6fbea4c0eafca99b99a0a1ea7149d31af5fb5e3ab2c9fb210355d24f8c40174bba2be9a384427ddb87eb027e9869ba84778ssdeep: 24576:ONR2zaQBt37/CZ0w1PeWnzqhqCC6+PEfyrU1ugI8tZ4pXwpyVk:/UsrC6aEfyYFZ4pXpGtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: InternalName: FileVersion: 1.1.23.00ProductName: ProductVersion: 1.1.23.00FileDescription: OriginalFilename: Translation: 0x0409 0x04b0

Symmi.90467 also known as:

K7AntiVirus	Trojan ( 004f599c1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Miner.12
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Symmi.90467
K7GW	Trojan ( 004f599c1 )
Cybereason	malicious.5968d5
ESET-NOD32	Win32/TrojanDropper.AHK.AAO
Zoner	Trojan.Win32.73221
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
ClamAV	Win.Malware.Autohk-6995517-0
Kaspersky	Trojan-Dropper.Win32.AutoHK.h
BitDefender	Gen:Variant.Symmi.90467
ViRobot	Trojan.Win32.Agent.812032.I
MicroWorld-eScan	Gen:Variant.Symmi.90467
Ad-Aware	Gen:Variant.Symmi.90467
Sophos	ML/PE-A
F-Secure	Heuristic.HEUR/AGEN.1106163
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
FireEye	Generic.mg.56b30f45968d577c
Emsisoft	Gen:Variant.Symmi.90467 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Deshacop.iv
Avira	HEUR/AGEN.1106163
eGambit	Unsafe.AI_Score_78%
Microsoft	TrojanDropper:Win32/Zampol.A!bit
Arcabit	Trojan.Symmi.D16163
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Symmi.90467
AhnLab-V3	Malware/Win32.RL_Generic.R274014
McAfee	Dropper-AHK.a
MAX	malware (ai score=86)
VBA32	Trojan.Hotkeychick
Rising	Trojan.Generic@ML.100 (RDML:+o1EIp9SNOuj2cXN1i2MNQ)
Ikarus	Trojan.Cryptic
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/AHK.AAO!tr
AVG	Win32:Evo-gen [Susp]