Categories: Malware

Barys.319924 removal

The Barys.319924 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.319924 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Barys.319924?


File Info:
name: ADD65CD18B6ADF799F5F.mlwpath: /opt/CAPEv2/storage/binaries/96b081fe0d0a567eb53fe3718458781553539be02d26ccfff32e2f2e184a33a6crc32: 3214E4B5md5: add65cd18b6adf799f5f9bf9ed5f572esha1: 77d1b8b6bf41a02c731488509234535730e94d33sha256: 96b081fe0d0a567eb53fe3718458781553539be02d26ccfff32e2f2e184a33a6sha512: 83b20bbfe0c59fb2fca6898d35d5e073bce37701a5a6d2b85232971c928c2509ead9c4257b0144780cf068a9d613c1431ddc0cb61094098894b22aaac6f41701ssdeep: 3072:lBOPmb+WoRDrMW7dB+aAwVJnzNiaG1fU0:6xBpzAd7type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FE15F55197507958C8BB03B48DEEAAE677355D24C726DCA6F3422ADF86D123183C2F83sha3_384: 2bd961076da3d743f269af30e840f201ef8c16a668ae618d0bf372d353a1c864633bdbbd9ee3e17da8684bdd86a4598eep_bytes: 68789d4400e8f0ffffff000050000000timestamp: 2014-06-15 16:17:49
Version Info:
Translation: 0x0409 0x04b0Comments: Þ2QIBwì±8EnòaèœœsÁmzCompanyName: žKj7rt£žnœBìH™svÚõjœFileDescription: ™kyVdžHzƒzyoœò1ÞDQDzLegalCopyright: £võœœæO±žÚzs1œ3BBOœBLegalTrademarks: zœ«zOõ3qsœwõZžœÞõMžhProductName: 4xkœÚ±uœ0sòÚFHkœBèHÞFileVersion: 7.01.0022ProductVersion: 7.01.0022InternalName: limpoOriginalFilename: limpo.exe

Barys.319924 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Barys.319924
ClamAV	Win.Dropper.DarkKomet-9204913-0
FireEye	Generic.mg.add65cd18b6adf79
CAT-QuickHeal	Trojan.VBCrypt.MF.82
McAfee	GenericRXAE-LP!ADD65CD18B6A
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.2930916
Sangfor	[MICROSOFT VISUAL BASIC V6.0]
K7AntiVirus	Trojan ( 0049d96f1 )
K7GW	Trojan ( 0049d96f1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Inject2.AVPP
Cyren	W32/A-c13828ea!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.AYWH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Agent.nesavs
BitDefender	Gen:Variant.Barys.319924
NANO-Antivirus	Trojan.Win32.KillFiles.fmiltx
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10b41135
Ad-Aware	Gen:Variant.Barys.319924
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.VB.DRPF@5hzrzj
DrWeb	Trojan.KillFiles.16371
VIPRE	Gen:Variant.Barys.319924
TrendMicro	TROJ_GEN.R014C0PHH22
McAfee-GW-Edition	GenericRXAE-LP!ADD65CD18B6A
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Barys.319924 (B)
Ikarus	Trojan.Win32.Klovbot
GData	Gen:Variant.Barys.319924
Jiangmin	Trojan/Agent.hzsy
Avira	TR/Symmi.olaks
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Generic.ASMalwS.51F4
Microsoft	Trojan:Win32/Wacatac.A!ml
Google	Detected
AhnLab-V3	Trojan/Win32.Symmi.R139961
BitDefenderTheta	Gen:NN.ZevbaF.34606.6m3@a8vZD8oi
ALYac	Gen:Variant.Barys.319924
TACHYON	Trojan/W32.VB-Agent.954422
VBA32	Trojan.Agent
Malwarebytes	Trojan.Injector
TrendMicro-HouseCall	TROJ_GEN.R014C0PHH22
Rising	Worm.Rebhip!8.B31 (TFE:3:0hsExmn7lzQ)
Yandex	Trojan.GenAsa!xBQWsEuI47M
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Injector.BLMO!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.18b6ad
Panda	Trj/Genetic.gen