Barys.1409 removal

The Barys.1409 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Barys.1409 virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Anomalous binary characteristics

How to determine Barys.1409?


File Info:
crc32: 41250ED2
md5: af33aacfa253db453bcb57015a3a5cc4
name: AF33AACFA253DB453BCB57015A3A5CC4.mlw
sha1: 1c913c09890278439c98f81c3f26ec17cd1f7523
sha256: 2c54279760caffd604280afc4ecb424d041c5a7fbe3abb106b3799e95e70656a
sha512: 9acceab55cdecdb8a00e5dfd30f5580d02b42814765d78a481ab8817dd221dbfb4efa2b341d10894648caa4361af3ad9a432f5de78d4cb1076e4ff83c38b969d
ssdeep: 49152:mHi2DcM5byZ97edaq92PTNlO/yzETw3FQeBjUIdLhK9E22z:mCw5byZ9GoGgFQe+IdLc9E20
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: YhF
InternalName: Project1
FileVersion: 2.00.0001
CompanyName: DVEb
LegalTrademarks: PKKJ
Comments: vLjkLUg
ProductName: mDHJBaph
ProductVersion: 2.00.0001
FileDescription: File Description
OriginalFilename: Project1.exe

Barys.1409 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 004ca21b1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop2.61630
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Barys.1409
Cylance	Unsafe
Zillya	Trojan.Injector.Win32.61796
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 004ca21b1 )
Cybereason	malicious.fa253d
ESET-NOD32	a variant of Win32/Injector.IRE
Zoner	Probably Heur.ExeHeaderP
APEX	Malicious
Avast	Win32:Muldrop-GR [Trj]
ClamAV	Win.Trojan.Injector-179
Kaspersky	Trojan-Dropper.Win32.Injector.bxo
BitDefender	Gen:Variant.Barys.1409
MicroWorld-eScan	Gen:Variant.Barys.1409
Ad-Aware	Gen:Variant.Barys.1409
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZevbaF.34266.ewNfa871Jnni
FireEye	Generic.mg.af33aacfa253db45
Emsisoft	Gen:Variant.Barys.1409 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDropper.Injector.ln
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.B0F94
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Barys.1409
McAfee	Artemis!AF33AACFA253
MAX	malware (ai score=81)
VBA32	TScope.Trojan.VB
TrendMicro-HouseCall	TROJ_PAM_0000010066.T3
Rising	Malware.Heuristic!ET#98% (RDMK:cmRtazqXQQBkxL6VKKH2pqikEapg)
Yandex	Trojan.GenAsa!PSWoo4EBJnc
Ikarus	Gen.Trojan.Heur
MaxSecure	Packed.Cpex.Based.ht
Fortinet	W32/Refroso.DZP!tr
AVG	Win32:Muldrop-GR [Trj]

How to remove Barys.1409?

Barys.1409 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X