Categories: Malware

How to remove “Barys.2267”?

The Barys.2267 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.2267 virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Russian
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

maxbetusa.site

How to determine Barys.2267?


File Info:
crc32: F04FEA9Emd5: 06717e0891b95b64b93e4444a108bdfbname: 06717E0891B95B64B93E4444A108BDFB.mlwsha1: 65b85f61c197ddb226e245132705e0f7690a1e54sha256: 9b53822e0f485d23ea9e65fa387f8e1447b840709afc6e3169a8640ca3096ca7sha512: 39be1a78f065b2a7ba09ffc2d2aac1afb7c8b35f2e312a1aaef637614e85e7a433a9511d03cb581937ed3c0778a19e7ad4b530d5319275110a96d18e4d45ab1bssdeep: 12288:f2ghLvPhXpe3PliT+tcunJclGGmqM6IKIrWDKj8B3kVn5idZoIdK2X37dKPxUzKG:xXhZgPlouJcl7rM6n/d3dGIc2HJKC5type: MS-DOS executable, MZ for MS-DOS
Version Info:
0: [No Data]

Barys.2267 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005516431 )
DrWeb	Trojan.PWS.Siggen2.26063
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Doina.9172
K7GW	Trojan ( 005516431 )
Cybereason	malicious.891b95
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Barys.2267
NANO-Antivirus	Trojan.Win32.GenKryptik.fusakr
MicroWorld-eScan	Gen:Variant.Barys.2267
Sophos	Generic ML PUA (PUA)
Comodo	Malware@#3ryhf8o7bk6qr
BitDefenderTheta	Gen:NN.ZemsilF.34126.qo0@aOHRmti
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
FireEye	Generic.mg.06717e0891b95b64
Emsisoft	Gen:Variant.Barys.2267 (B)
SentinelOne	Static AI – Malicious SFX
Jiangmin	Trojan.Generic.dpqwa
Avira	TR/Dropper.Gen2
Antiy-AVL	Trojan/Generic.ASMalwS.2C26F17
Microsoft	Trojan:Win32/Wacatac.B!ml
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
GData	Gen:Variant.Doina.9172
MAX	malware (ai score=86)
VBA32	suspected of Trojan.Downloader.gen
Malwarebytes	Trojan.Banker
Panda	Trj/GdSda.A
Ikarus	Trojan.MSIL.Krypt
MaxSecure	Win.MxResIcn.Heur.Gen
Fortinet	MSIL/GenKryptik.DMFQ!tr
AVG	Win32:TrojanX-gen [Trj]