Adware.Barys.317701 (file analysis)

The Adware.Barys.317701 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware.Barys.317701 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Adware.Barys.317701?


File Info:
name: 014CC28B48BBCAFC94A3.mlw
path: /opt/CAPEv2/storage/binaries/3b679cff40e1395f2b87f102b2dc150b1051066ae4df87f6bace624302c46b1b
crc32: B58C6DCB
md5: 014cc28b48bbcafc94a32679b8f8a58d
sha1: 36ca4e9cf8e663c658ed67116fb5aa63ec7ba773
sha256: 3b679cff40e1395f2b87f102b2dc150b1051066ae4df87f6bace624302c46b1b
sha512: db159d166c80a18cc6409877ad071be0340251479901959cbc8c10160e4bb7e7960032da9581e7e1609dc176ba14ef3f06d4f172926315b5dcc5769df65a393c
ssdeep: 12288:QZRJM0sVeKTqz2/bZ6GC8wALc4hIdn6uRFtBRP:EaVeMU8wALcpdn
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1F0848D11B580C032D57A14B46A78DAB24D7D79301B789ACFF7880A7B5F306D2A635B2F
sha3_384: 8ed8a81260f1e908baa68edd8296a4c45746a1d37f4be4af5892bfc09947097cc5ce377f85fa2fecd51841fe3ef18d18
ep_bytes: 558bec837d0c017505e852090000ff75
timestamp: 2022-01-10 18:52:48

Version Info:
CompanyName: DinyiAPCP Group
FileDescription: Scanner
FileVersion: 1.0.0.1
InternalName: Scanner.dll
LegalCopyright: Copyright DinyiAPCP Group (C) 2022
OriginalFilename: Scanner.dll
ProductName: Scanner
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04b0

Adware.Barys.317701 also known as:

Bkav	W32.AIDetectMalware
Lionic	Adware.Win32.PCAcceleratePro.2!c
DrWeb	Adware.Downware.20386
MicroWorld-eScan	Gen:Variant.Adware.Barys.317701
FireEye	Gen:Variant.Adware.Barys.317701
Skyhigh	GenericRXUD-WH!014CC28B48BB
McAfee	GenericRXUD-WH!014CC28B48BB
Malwarebytes	PUP.Optional.PCAcceleratePro.DDS
VIPRE	Gen:Variant.Adware.Barys.317701
Sangfor	Adware.Win32.Pcacceleratepro.Vhea
K7AntiVirus	Adware ( 0059348e1 )
BitDefender	Gen:Variant.Adware.Barys.317701
K7GW	Adware ( 0059348e1 )
CrowdStrike	win/grayware_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Adware.PCAcceleratePro.AF
Avast	Win32:AdwareX-gen [Adw]
Rising	Adware.PCAcceleratePro!8.E82F (TFE:5:wbBPyazsoOB)
Sophos	Generic Reputation PUA (PUA)
F-Secure	Adware.ADWARE/PCAccerleratePro.wxqni
Zillya	Adware.PCAcceleratePro.Win32.3284
Emsisoft	Application.PCFIxer (A)
MAX	malware (ai score=66)
Avira	ADWARE/PCAccerleratePro.wxqni
Antiy-AVL	GrayWare[AdWare]/Win32.PCAcceleratePro
Arcabit	Trojan.Adware.Barys.D4D905
GData	Gen:Variant.Adware.Barys.317701
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Adware.Barys.317701
Cylance	unsafe
Tencent	Malware.Win32.Gencirc.10bd9357
Ikarus	AdWare.Pcacceleratepro
AVG	Win32:AdwareX-gen [Adw]

How to remove Adware.Barys.317701?

Adware.Barys.317701 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X