Barys.419537 (B) removal guide

The Barys.419537 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Barys.419537 (B) virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Barys.419537 (B)?


File Info:
name: 6EC2A8621AC20352A7BF.mlw
path: /opt/CAPEv2/storage/binaries/c71a3e7ee9ee82c846ad9ed0ccd7d131a882ebc37007ab8dd527b956ca32d43f
crc32: C8AE553B
md5: 6ec2a8621ac20352a7bf31d95976ed6a
sha1: 32b5bc01887da87052ad60d79e168a6aed17ce5e
sha256: c71a3e7ee9ee82c846ad9ed0ccd7d131a882ebc37007ab8dd527b956ca32d43f
sha512: b27ecba9fa3711667bad67a74cb43c85c9eade27756908b83e3d895fd19b584f6be7ebbc697d64abfaf8cf8e5c0046e3ecb3feca4db24aa4216e7cea8937462f
ssdeep: 6144:9B/ccEDl241TnIry1ljkzPIg4KU3nLDkQcxjNVdm7c8dO3dsmtLjUFL6p:91MwSaPIg4K2nUQcxj4h83dsm5jUF
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15AE47D11B640C031E3E52771455AE6B01BA96E341AA9D6CFF7A87E395E301D39B3B20F
sha3_384: 98085cae2301e57b77a6c9c91e42da01660f3cac1d6e8dfd6d999e27699f578c00dcdbfecd1a7c55b47973b04b072bca
ep_bytes: 656d656e7400004c01467265654c6962
timestamp: 2013-10-31 14:21:57

Version Info:
0: [No Data]

Barys.419537 (B) also known as:

Bkav	W32.AIDetectMalware
Cylance	unsafe
K7AntiVirus	Riskware ( 00584baa1 )
Cybereason	malicious.1887da
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
Arcabit	Trojan.Barys.D666D1
Tencent	Trojan.Win32.CardSpy.16000130
Emsisoft	Gen:Variant.Barys.419537 (B)
DrWeb	Trojan.Siggen7.27830
VIPRE	Gen:Variant.Barys.419537
Trapmine	suspicious.low.ml.score
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Antiy-AVL	Trojan/Win32.Urelas
Google	Detected
Ikarus	Trojan-PWS.Banker6
Fortinet	W32/CardSpy.PRKJ!tr
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Barys.419537 (B)?

Barys.419537 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X