Barys.317084 removal

The Barys.317084 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Barys.317084 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Barys.317084?


File Info:
name: B544F62E183B88332C8C.mlw
path: /opt/CAPEv2/storage/binaries/60251948df17d582b1a94fd08edddedb0103d89d7d4782e4050be034c74a73c7
crc32: 702B568A
md5: b544f62e183b88332c8ca04771f359f0
sha1: e3baad59cabcfb12730716e33cba12376081fcf4
sha256: 60251948df17d582b1a94fd08edddedb0103d89d7d4782e4050be034c74a73c7
sha512: a35547755bd93879e45990ba301bd11f935b334d2e7c6cc20bd240edab4d369d437640a6dbb88f5d839eb581fbc5911ec3d6c274e8aed1fbdaf57bec223adf7b
ssdeep: 6144:CKEtHuv0mCZQC+OLQo+6cyDSiytj71cPE4jKlFvVp:4Qv0R2CGr6c2t636PfjiFdp
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T194A4B082EBC300F6D8570B715097A77F9B724A1A402DDE57D7A42E1ABC33313AE29794
sha3_384: 2fb32919d1f480d6abc87e6cab2cdd00d51b1ce2c44c66f27b16e9e72781081861e7aa1007677dfc68009c40cc6cb558
ep_bytes: 5589e583ec08c7002402000000ff15c0
timestamp: 2001-01-06 18:54:27

Version Info:
0: [No Data]

Barys.317084 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Barys.317084
ClamAV	Win.Trojan.Agent-1379662
FireEye	Generic.mg.b544f62e183b8833
CAT-QuickHeal	Trojan.GenericPMF.S3088163
ALYac	Gen:Variant.Barys.317084
Cylance	unsafe
Zillya	Worm.Agent.Win32.227974
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	EmailWorm ( 004df6bb1 )
K7AntiVirus	EmailWorm ( 004df6bb1 )
Arcabit	Trojan.Barys.D4D69C
BitDefenderTheta	Gen:NN.ZexaF.36662.CGY@aWl!Wcmi
VirIT	Trojan.Win32.Generic.AFHG
Cyren	W32/A-98aec620!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.NQM
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.GenericML.xnet
BitDefender	Gen:Variant.Barys.317084
Avast	Win32:Virtu-F [Inf]
Sophos	ML/PE-A
F-Secure	Worm.WORM/Agent.icuyh
VIPRE	Gen:Variant.Barys.317084
McAfee-GW-Edition	BehavesLike.Win32.Worm.gm
Trapmine	suspicious.low.ml.score
Emsisoft	Gen:Variant.Barys.317084 (B)
SentinelOne	Static AI – Malicious PE
Avira	WORM/Agent.icuyh
Antiy-AVL	Trojan/Win32.Agentb
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:Trojan.Win32.GenericML.xnet
GData	Gen:Variant.Barys.317084
Google	Detected
AhnLab-V3	Trojan/Win32.Scar.R160138
VBA32	TScope.Malware-Cryptor.SB
MAX	malware (ai score=87)
Panda	Trj/Genetic.gen
Ikarus	Trojan.Win32.Scar
MaxSecure	Trojan.Malware.185628869.susgen
Fortinet	W32/CoinMiner.F
AVG	Win32:Virtu-F [Inf]
DeepInstinct	MALICIOUS

How to remove Barys.317084?

Barys.317084 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X