Malware

Barys.434151 removal

Malware Removal

The Barys.434151 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Barys.434151 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Barys.434151?


File Info:

name: F031DF4D0F18B8E1569C.mlw
path: /opt/CAPEv2/storage/binaries/c2bb243aaf1b8698ad2b6b437d7a4ea33e1a17e8b3672ff7313b87aea6d106ef
crc32: 249498DB
md5: f031df4d0f18b8e1569c313512a8abe5
sha1: 79e1536cffdb32f0ee5cd80e101114b6ebcf08eb
sha256: c2bb243aaf1b8698ad2b6b437d7a4ea33e1a17e8b3672ff7313b87aea6d106ef
sha512: de2465fd83bd29aac13d64548335e1b9758cab3cf587ab31975beb97e53aa44691363779e82e47d3af6b50d8c5557a77a4b18f5d2ad951e6a37429708667a43c
ssdeep: 3072:oVpfZ3onpkeCAdI2TL7zzwbjrJvnqnpiu7:oV7ou8I2XzujrJPqnpiu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T103048F628970BB13E951093517E06BFB801D3C2F4BE5060A7CAEDA5F3763D9A349F942
sha3_384: a31df590accea68169736e9d3bbeec4c1ee12d50defbdb2099705b3de1c87362f4741fbf78b57005c41ebbfd4360775b
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09

Version Info:

0: [No Data]

Barys.434151 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
DrWebTrojan.MulDrop17.61497
MicroWorld-eScanGen:Variant.Barys.434151
ClamAVWin.Malware.Midie-6847893-0
FireEyeGeneric.mg.f031df4d0f18b8e1
CAT-QuickHealTrojan.MuldVMF.S21469993
SkyhighBehavesLike.Win32.Generic.ct
McAfeeGenericRXHC-SS!F031DF4D0F18
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.vb
K7AntiVirusTrojan ( 005690671 )
K7GWTrojan ( 005690671 )
Cybereasonmalicious.cffdb3
BitDefenderThetaAI:Packer.30EF74A420
VirITTrojan.Win32.VBUCornT.DRP
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/GenKryptik.FNGV
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.VB.gen
BitDefenderGen:Variant.Barys.434151
NANO-AntivirusTrojan.Win32.Banker1.fnwqkb
SUPERAntiSpywareTrojan.Agent/Gen-Strictor
AvastWin32:VB-AJKU [Trj]
TencentTrojan.Win32.VB.ko
TACHYONTrojan/W32.VB-Agent.188501.G
SophosMal/VB-AQT
F-SecureTrojan.TR/Crypt.XPACK.Gen
VIPREGen:Variant.Barys.434151
TrendMicroTROJ_GEN.R03BC0DBT24
EmsisoftGen:Variant.Barys.434151 (B)
IkarusTrojan.Crypt
GDataWin32.Trojan.VBClone.B
JiangminTrojan.VB.aqyg
GoogleDetected
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.Wacatac.b
ArcabitTrojan.Barys.D69FE7
ZoneAlarmHEUR:Trojan.Win32.VB.gen
MicrosoftTrojanDropper:Win32/Muldrop.V!MTB
VaristW32/VB_Troj.J.gen!Eldorado
AhnLab-V3Trojan/Win32.Agent.R252862
VBA32SScope.Trojan.VB
ALYacGen:Variant.Barys.434151
MAXmalware (ai score=83)
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DBT24
RisingTrojan.VBClone!1.E032 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureVirus.W32.GenericML.xnet
FortinetW32/VBClone.D!tr
AVGWin32:VB-AJKU [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Barys.434151?

Barys.434151 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment