Categories: Malware

Barys.430 removal guide

The Barys.430 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.430 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Barys.430?


File Info:
name: C278D8C3D9C20F2291BF.mlwpath: /opt/CAPEv2/storage/binaries/6b8c5923f6833dafd982b3eb07f2d96bcad249c6450f6b91c23839f1b4d4454fcrc32: 0B5F5A78md5: c278d8c3d9c20f2291bf111965f1506asha1: 1c1a108f99aba7ae44a657bdee75d58cf5cfe85csha256: 6b8c5923f6833dafd982b3eb07f2d96bcad249c6450f6b91c23839f1b4d4454fsha512: 058f722531b553d6909811591e791dc796703183c08eca63d4a9475f6c150d40c5853d8302021bf502b86194a93568def32aba809b25b6ad2a508a16cdbe8961ssdeep: 768:Tf7hTVyy7xgTkoOtTk1X7SphEgqoP+qZsg1w3Tys2L8tx9N1dWatsvNlxWNxxdCs:LyyFgT0Y1XSL274wCd7U1ftrDtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T13643F927E5E4AC36F549D1B12D634339156FBE715080A357B38BEB0D2EB61E28CA8707sha3_384: 1d96496fc530548efe8b374dc7ad44d6c13f4e7b623cda932e3f60b6ff2470613a8de2574d05650e8768559bd4de1924ep_bytes: 689c184000e8f0ffffff000000000000timestamp: 1996-06-05 01:30:14
Version Info:
Translation: 0x0409 0x04b0CompanyName: GCProductName: hvac mainFileVersion: 1.00ProductVersion: 1.00InternalName: DUCTWTOriginalFilename: DUCTWT.exe

Barys.430 also known as:

Lionic	Trojan.Multi.Generic.4!c
MicroWorld-eScan	Gen:Variant.Barys.430
ALYac	Gen:Variant.Barys.430
Cylance	Unsafe
Alibaba	Trojan:Win32/Virtu.272cd489
Cybereason	malicious.3d9c20
Symantec	Trojan.Gen.2
Elastic	malicious (high confidence)
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Barys.430
Avast	Win32:Virtu-F [Inf]
Ad-Aware	Gen:Variant.Barys.430
Emsisoft	Gen:Variant.Barys.430 (B)
F-Secure	Heuristic.HEUR/AGEN.1205158
McAfee-GW-Edition	BehavesLike.Win32.Downloader.qm
FireEye	Generic.mg.c278d8c3d9c20f22
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Barys.430
Avira	HEUR/AGEN.1205158
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Arcabit	Trojan.Barys.430
Microsoft	Trojan:Win32/Tiggre!rfn
Cynet	Malicious (score: 99)
McAfee	Artemis!C278D8C3D9C2
MAX	malware (ai score=85)
VBA32	Trojan.Wacatac
Rising	Virus.Virut!8.44 (CLOUD)
Fortinet	W32/CoinMiner.F
AVG	Win32:Virtu-F [Inf]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_60% (W)