Malware

What is “Barys.323993”?

Malware Removal

The Barys.323993 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Barys.323993 virus can do?

  • Authenticode signature is invalid

How to determine Barys.323993?


File Info:

name: A8E48F09C70C09E74DFB.mlw
path: /opt/CAPEv2/storage/binaries/be9615fb98cabc17f5fb9281aca168aaae77a8fc9ced2d9c56b5bb3cd200b2b9
crc32: 8CDE1E8E
md5: a8e48f09c70c09e74dfbc2d457bd51c0
sha1: 7754aeda8d2292aaf2b5a675e65f3530b23a0c7a
sha256: be9615fb98cabc17f5fb9281aca168aaae77a8fc9ced2d9c56b5bb3cd200b2b9
sha512: 22b1d9a766b4c8feb6a0eed8253f98ce0deb9234e72c8f75bb770d72cfd6c0d200c9f30bfb94489bf007e6c2a698b52afedef0194f30d193cf4d67c374f0284e
ssdeep: 192:xDOMNKyZIu74Ws9dXesqy6txkp6q7PtInapa1+08+c8:xDOME0v4Ws9dXdJsTqZrpa1+08+c
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T128628611A7F8C224F6F7BB3545B356900775BE05E962CAEF0870344D1EBEA538550F22
sha3_384: 68a0b595e932e5e5a0964b4df0a8e0e501c38c3c83ce13e55e2da5f1556e53fb0393af971c522674b873c4be78918d3e
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-09-20 23:03:57

Version Info:

Translation: 0x0000 0x04b0
FileDescription: Nitro Xbox
FileVersion: 1.0.0.0
InternalName: Nitro Xbox.exe
LegalCopyright:
OriginalFilename: Nitro Xbox.exe
ProductName: Nitro Xbox Game Pass Ultimate
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Barys.323993 also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.MSIL.Stealer.l!c
MicroWorld-eScanGen:Variant.Barys.323993
FireEyeGeneric.mg.a8e48f09c70c09e7
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
SkyhighGenericRXLP-ZH!A8E48F09C70C
McAfeeGenericRXLP-ZH!A8E48F09C70C
Cylanceunsafe
ZillyaTrojan.Stealer.Win32.8242
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanPSW:MSIL/Dcstl.aa422d5e
K7GWTrojan-Downloader ( 0056ce1e1 )
K7AntiVirusTrojan-Downloader ( 0056ce1e1 )
BitDefenderThetaGen:NN.ZemsilF.36680.am0@a0@5@Pc
SymantecDownloader.Trojan
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/TrojanDownloader.Tiny.ALU
APEXMalicious
ClamAVWin.Packed.Razy-9634380-0
KasperskyHEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefenderGen:Variant.Barys.323993
NANO-AntivirusTrojan.Win32.Stealer.hygzmx
AvastWin32:RATX-gen [Trj]
TencentMsil.Trojan-Spy.Stealer.Rsmw
SophosMal/MSIL-UO
F-SecureHeuristic.HEUR/AGEN.1311244
DrWebTrojan.DownloaderNET.81
VIPREGen:Variant.Barys.323993
TrendMicroTrojan.MSIL.TOKENSTEALER.SMSNQ
EmsisoftGen:Variant.Barys.323993 (B)
SentinelOneStatic AI – Malicious PE
GDataMSIL.Trojan.TokenStealer.A
GoogleDetected
AviraHEUR/AGEN.1311244
VaristW32/Trojan.FLJ.gen!Eldorado
Antiy-AVLTrojan[Spy]/MSIL.Stealer
XcitiumMalware@#2n8irvxsmzecn
ArcabitTrojan.Barys.D4F199
ViRobotTrojan.Win32.S.Infostealer.14848.C
ZoneAlarmHEUR:Trojan-Spy.MSIL.Stealer.gen
MicrosoftPWS:MSIL/Dcstl.GD!MTB
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.C4181250
VBA32TScope.Trojan.MSIL
ALYacGen:Variant.Barys.323993
MAXmalware (ai score=80)
MalwarebytesSpyware.DiscordStealer
TrendMicro-HouseCallTrojan.MSIL.TOKENSTEALER.SMSNQ
RisingSpyware.Stealer!8.3090 (CLOUD)
IkarusTrojan-Downloader.MSIL.Tiny
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Tiny.AQK!tr
AVGWin32:RATX-gen [Trj]
Cybereasonmalicious.a8d229
DeepInstinctMALICIOUS

How to remove Barys.323993?

Barys.323993 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment