What is “Barys.26945”?

The Barys.26945 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Barys.26945 virus can do?

CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with SmartAssembly
Authenticode signature is invalid

How to determine Barys.26945?


File Info:
name: E54E0565B270FB2AA6F6.mlw
path: /opt/CAPEv2/storage/binaries/1bb5237331c15ea0a9f82eaa7b5a282c284e96740655768ad87a92a8b39d3724
crc32: 0F4904A6
md5: e54e0565b270fb2aa6f66ec51bb2ed1c
sha1: aa06906376b8eaa2f60b7ac7e715a8468646a8c6
sha256: 1bb5237331c15ea0a9f82eaa7b5a282c284e96740655768ad87a92a8b39d3724
sha512: c69938f9ef1df548303c9b08ae998c2861d1c4ab186b7dedc544b5a122bcce09229584960b4eb07180f0e1a79a6f11678b7084c51f7e0b0e96c58b89a47a026d
ssdeep: 1536:sJn/RY7jt+0VbADrKj3Ae+TlkG4CvopoSIfmI2HwOxKIibs12XxM8MwMUb6MuMbH:sReX6Szy9EowqRzKP/KR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DA94ED263BA6D54BC6E48E387EABC213A6ADDF9283F700052AD53071DEB514C38935B5
sha3_384: 915afb2931635e2ba35057b96dd37e092cce73edca1faa68bb92228a73108c0a49dc6717a4a519bc0a38070a334ac060
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-11-07 13:51:26

Version Info:
0: [No Data]

Barys.26945 also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
FireEye	Generic.mg.e54e0565b270fb2a
VIPRE	Gen:Variant.Barys.26945
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	MSIL.Downloader!gen8
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:Trojan-Ransom.MSIL.Blocker.gen
BitDefender	Gen:Variant.Barys.26945
MicroWorld-eScan	Gen:Variant.Barys.26945
Ad-Aware	Gen:Variant.Barys.26945
Emsisoft	Gen:Variant.Barys.26945 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Barys.26945
Arcabit	Trojan.Barys.D6941
Microsoft	Trojan:Win32/Woreflint.A!cl
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZemsilF.34754.zm0@aWXnZ2h
ALYac	Gen:Variant.Barys.26945
MAX	malware (ai score=83)
VBA32	Downloader.MSIL.gen.rexp
Rising	Trojan.Generic/MSIL@AI.97 (RDM.MSIL:xz9EV7V/w6jM51d8By0SlA)
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.300983.susgen
AVG	RATX-gen [Trj]
Avast	RATX-gen [Trj]

How to remove Barys.26945?

Barys.26945 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X