Malware

Should I remove “Barys.432014”?

Malware Removal

The Barys.432014 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Barys.432014 virus can do?

  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Barys.432014?



File Info:

name: E59EFC5A536973C15568.mlw
path: /opt/CAPEv2/storage/binaries/157f107863da12927dadfbbda65df6e08c42842481f7a9a273184b67531d33b2
crc32: D4E04ED8
md5: e59efc5a536973c155682fea17bc6eff
sha1: 51c32c61c27ebf91b1ec3748a1e8b791e2853bcd
sha256: 157f107863da12927dadfbbda65df6e08c42842481f7a9a273184b67531d33b2
sha512: bc17bbe97cefea0676d16aa1012b577d0d519caf7c01a26b7ad51633c29bb92a18acb285b247c03dd3e4967441513daa3da50d59184a8bbd1820751c01fbe67a
ssdeep: 196608:8zbj4AnYitqrU/rm3oXilD5iX4e7yxDpatps2MmsUzsFNXklzGZwv:8zbjl3tny3OilDYI+yx1upLDzI3M
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12E86337252812EC3F2E45275AD37A451C82ABE7ADB4115A8F65FBED640332CC8FF8650
sha3_384: 48540a14f3df059d51caccb1e6d503b3fd7d27218f0111b4fb2a34ccf04f025b5055957a6d806984637afa2a188ef934
ep_bytes: e84b0100005389e3538b73088b7b10fc
timestamp: 2021-10-21 10:04:14


Version Info:

Comments: 
CompanyName: 
FileDescription: Devfoam Applicatione MFC
FileVersion: 1, 0, 0, 1
InternalName: DevFoam
LegalCopyright: Авторские права (C) 2005
LegalTrademarks: 
OriginalFilename: DevFoam.EXE
PrivateBuild: 
ProductName: Devfoam Applicatione
ProductVersion: 1, 0, 0, 1
SpecialBuild: 
Translation: 0x0019 0x04e3

Barys.432014 also known as:

BkavW32.Common.A04D3E0F
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanGen:Variant.Barys.432014
FireEyeGeneric.mg.e59efc5a536973c1
SkyhighBehavesLike.Win32.Dropper.wc
ALYacGen:Variant.Barys.432014
Cylanceunsafe
SangforTrojan.Win32.Agent.Vi6n
Cybereasonmalicious.1c27eb
ArcabitTrojan.Barys.D6978E
Elasticmalicious (moderate confidence)
APEXMalicious
BitDefenderGen:Variant.Barys.432014
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
EmsisoftGen:Variant.Barys.432014 (B)
VIPREGen:Variant.Barys.432014
Trapminesuspicious.low.ml.score
IkarusPUA.Themida
Antiy-AVLTrojan/Win32.Agent
GDataGen:Variant.Barys.432014
McAfeeArtemis!E59EFC5A5369
MAXmalware (ai score=85)
MalwarebytesGeneric.Malware/Suspicious
ZonerProbably Heur.ExeHeaderL
TrendMicro-HouseCallTROJ_GEN.R002H09J923
RisingTrojan.Generic@AI.100 (RDML:ZLrATndGXoIA7sOF5bnE7A)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.216104596.susgen
FortinetRiskware/Application
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Barys.432014?

Barys.432014 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment