Categories: Malware

What is “Barys.132”?

The Barys.132 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.132 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Spanish (Modern)
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Barys.132?


File Info:
crc32: 2354E333md5: 1f2d6f8a28e75ffc8dc6903e40abb5c7name: 1F2D6F8A28E75FFC8DC6903E40ABB5C7.mlwsha1: 8a7418103b5ba8bab83889be6f7fcc387abf0d28sha256: 7806a13e1ca0ff607fb46f970b596c1f3490b1e456003cb3061967a7ff2701dcsha512: 95e78dcc6f39e404f00de05a6aa58647b938aaac6ca2f826ec7e722031fd07f906ec59791beffef003f96906442ed0cf3d9c969f075a87a484c82cf9353f8e7dssdeep: 6144:V6pmkZGFeeYP2n+aC1meyUGimMOxrePlFqDHDypIVOBx:g0ksdwuW1meyUGphxrQP5xtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0c0a 0x04b0LegalCopyright: Mister HQ. Corporationxa9 INC.xae 2010-08InternalName: MisterHQFileVersion: 1.02.0015CompanyName: Mister HQ CorporationLegalTrademarks: Mister HQ. Corporationxa9 INC.xae 2010-08Comments: Copyright xa9 2010-08 Mister HQ. Corporationxa9 INC.xaeProductName: MisterHQ.exeProductVersion: 1.02.0015FileDescription: Copyright xa9 2010-08 Mister HQ. Corporationxa9 INC.xaeOriginalFilename: MisterHQ.exe

Barys.132 also known as:

Bkav	W32.AIDetect.malware1
DrWeb	Trojan.PWS.Banker.64355
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Barys.132
Zillya	Trojan.Banbra.Win32.10177
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
Alibaba	Trojan:Win32/Banker.1b80ee76
Cybereason	malicious.a28e75
Cyren	W32/VB.DO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/VB.PMM
Zoner	Probably Heur.ExeHeaderH
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Barys.132
NANO-Antivirus	Trojan.Win32.Banbra.kuctx
ViRobot	Trojan.Win32.A.Banbra.273235
MicroWorld-eScan	Gen:Variant.Barys.132
Tencent	Win32.Trojan-banker.Banbra.Dzkn
Ad-Aware	Gen:Variant.Barys.132
Sophos	ML/PE-A
Comodo	Malware@#1t5djwpgze5l4
BitDefenderTheta	Gen:NN.ZevbaF.34050.qu0aaSaMTXO
VIPRE	Trojan.Win32.Generic.pak!cobra
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.dc
FireEye	Generic.mg.1f2d6f8a28e75ffc
Emsisoft	Gen:Variant.Barys.132 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Banker.Banbra.ixf
Avira	TR/Crypt.ASPM.Gen
eGambit	Generic.PSW
Antiy-AVL	Trojan/Generic.ASMalwS.2D0F43
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Barys.132
AhnLab-V3	Trojan/Win32.Banbra.C9795
McAfee	Artemis!1F2D6F8A28E7
MAX	malware (ai score=100)
Panda	Trj/Banbra.GXN
Yandex	Trojan.PWS.Banbra!H4pIdHLyW4Q
Ikarus	Trojan-Banker.Win32.Banbra
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	W32/Banbra.AHYU!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.Hw8AEpsA