Categories: Malware

Barys.11079 removal

The Barys.11079 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.11079 virus can do?

Executable code extraction
Creates RWX memory
Drops a binary and executes it
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Creates a copy of itself

How to determine Barys.11079?


File Info:
crc32: 0E1760D5md5: e796a8b7f53a14633f10d8d44899a0dcname: E796A8B7F53A14633F10D8D44899A0DC.mlwsha1: 429992b4558eb75dfca957df56639ea542d5cf60sha256: 1df02687b1249a111c5d9940b3505d4d3e9295846091c1c8e812369cb4cddf09sha512: d896f4e202f45e9852ab501a84936b37ede66e3d48be75928a3b14b6c0c18000e97479f1e25667a2e4279618f3c596f39791b2877f068e64d5a8c1d405cfccc1ssdeep: 1536:jGDa768ziGtqXmOJ1ebYIKJgpyFv1LjnQc2ru+LoJM++JDi4U0TZcXdf+sUvb:SDa766iGdVfypdkc2ru+n+s1Ttype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
0: [No Data]

Barys.11079 also known as:

K7AntiVirus	Trojan ( 004199631 )
Lionic	Trojan.MSIL.Generic.m!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader9.3923
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Barys.11079
Cylance	Unsafe
Sangfor	Backdoor.Win32.Generic.8
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Backdoor:MSIL/Injector.308bf4b7
K7GW	Trojan ( 004199631 )
Cybereason	malicious.7f53a1
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Injector.AZO
APEX	Malicious
Avast	MSIL:GenMalicious-AGG [Trj]
Kaspersky	HEUR:Backdoor.MSIL.Generic
BitDefender	Gen:Variant.Barys.11079
NANO-Antivirus	Trojan.Win32.Barys.ewoupz
MicroWorld-eScan	Gen:Variant.Barys.11079
Tencent	Msil.Backdoor.Generic.Alik
Ad-Aware	Gen:Variant.Barys.11079
Sophos	Mal/Generic-S
Comodo	Malware@#2gtpdbs33e4gx
F-Secure	Trojan.TR/Crypt.XPACK.Gen
BitDefenderTheta	Gen:NN.ZemsilF.34266.fiW@aC9Oah
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.nh
FireEye	Generic.mg.e796a8b7f53a1463
Emsisoft	Gen:Variant.Barys.11079 (B)
Avira	TR/Crypt.XPACK.Gen
eGambit	Unsafe.AI_Score_97%
Antiy-AVL	Trojan[Backdoor]/MSIL.AGeneric
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Backdoor:MSIL/Bladabindi
Arcabit	Trojan.Barys.D2B47
GData	Gen:Variant.Barys.11079
AhnLab-V3	Trojan/Win32.Korat.C2553193
Acronis	suspicious
McAfee	Generic.cxg
MAX	malware (ai score=82)
Malwarebytes	Generic.Malware/Suspicious
Yandex	Trojan.Injector!HdIbY70/YvI
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Dropper.YT!tr
AVG	MSIL:GenMalicious-AGG [Trj]
Paloalto	generic.ml