Barys.406189 (file analysis)

The Barys.406189 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.406189 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• CAPE detected the embedded pe malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Barys.406189?

File Info:
name: 24F0C6B4F7C6FF562BF1.mlw
path: /opt/CAPEv2/storage/binaries/22f3496d0563dd705f8c1b281d7bd8263ffae34b55410d380378e0bfc30cac07
crc32: B68805B0
md5: 24f0c6b4f7c6ff562bf1e74c5af7d14f
sha1: 0ac8d47127708a414219279e84ba7b45618a3a9b
sha256: 22f3496d0563dd705f8c1b281d7bd8263ffae34b55410d380378e0bfc30cac07
sha512: a150264a3a2194d08067904b8dd2d073a129034421dc816728251beca40bdebb37a8356fdbcbfb900371f8c0bddb4d7354a19315a57f4bbf0cd0ef29ec37f096
ssdeep: 3072:G/LKWv0COOqhCjG8G3GbGVGBGfGuGxGWYcrf6KadU:G/2WvFQAYcD6Kad
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A5345136A0D62906F649BCBD372E97B201B8944B215F11EB36720EDA1E1CDD0C5786BF
sha3_384: bbfb0063245f82b3ad3de2a434f9ec003d29819d36c13a84fd773bf3eb2318b7b150cf8dfd15dcb49b56abd1494bd9a6
ep_bytes: 68d4124000e8eeffffff000050000000
timestamp: 2010-07-27 13:12:49

Version Info:
0: [No Data]

Barys.406189 also known as:

How to remove Barys.406189?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.