Malware

Barys.434151 removal guide

Malware Removal

The Barys.434151 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Barys.434151 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Barys.434151?



File Info:

name: 9B0316481B5A0A1F7D7E.mlw
path: /opt/CAPEv2/storage/binaries/125d21be9b7d8a71d94b3bbe33ba7a76ea97cb9a05b91b45bf740e145e8498be
crc32: FE5BCA1F
md5: 9b0316481b5a0a1f7d7ebb71581064b7
sha1: 6b948456f0aff843773a44ae5c5ba36551ab6f4c
sha256: 125d21be9b7d8a71d94b3bbe33ba7a76ea97cb9a05b91b45bf740e145e8498be
sha512: a6c9e5d922ba91fe561a2660a010a015ed2b59719d16f071a752622b9bb0cd7891c3665cf426c13b04aaf85beac17ad208999271d55d50277bbbce9dcff4cf2c
ssdeep: 3072:oWpfZ3onpkeCAdI2TL70zwbBOJvnqnpiu+:oW7ou8I2YzuBOJPqnpiu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D9048F628970BB13E951093517E06BFB801D3C2F4BE5060A7CAEDA5F3763D9A349F942
sha3_384: 532bb5f67f0138d7c5f7d1e42bfcb4f58b20ac819523673a69bdaa6e8a593778891be7ce16230f13d2fd4c17db8a47bd
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09


Version Info:

0: [No Data]

Barys.434151 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.VB.tsbh
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Barys.434151
ClamAVWin.Malware.Midie-6847893-0
FireEyeGeneric.mg.9b0316481b5a0a1f
CAT-QuickHealTrojan.MuldVMF.S21469993
SkyhighBehavesLike.Win32.Generic.ct
McAfeeGenericRXHC-SS!9B0316481B5A
MalwarebytesGeneric.Malware.AI.DDS
ZillyaTrojan.GenKryptik.Win32.488358
SangforSuspicious.Win32.Save.vb
K7AntiVirusTrojan ( 005690671 )
K7GWTrojan ( 005690671 )
Cybereasonmalicious.6f0aff
VirITTrojan.Win32.VBUCornT.DRP
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/GenKryptik.FNGV
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.VB.gen
BitDefenderGen:Variant.Barys.434151
NANO-AntivirusTrojan.Win32.Banker1.fnwqkb
SUPERAntiSpywareTrojan.Agent/Gen-Strictor
AvastWin32:VB-AJKU [Trj]
TencentTrojan.Win32.VB.ko
EmsisoftGen:Variant.Barys.434151 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.MulDrop17.61497
VIPREGen:Variant.Barys.434151
TrendMicroTROJ_GEN.R03BC0DBR24
SophosMal/VB-AQT
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.VBClone.B
JiangminTrojan.VB.aqyg
GoogleDetected
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.Wacatac.b
Kingsoftmalware.kb.a.999
ArcabitTrojan.Barys.D69FE7
ZoneAlarmHEUR:Trojan.Win32.VB.gen
MicrosoftTrojanDropper:Win32/Muldrop.V!MTB
VaristW32/VB_Troj.J.gen!Eldorado
AhnLab-V3Trojan/Win32.Agent.R252862
VBA32SScope.Trojan.VB
ALYacGen:Variant.Barys.434151
MAXmalware (ai score=89)
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DBR24
RisingTrojan.VBClone!1.E032 (CLASSIC)
IkarusTrojan.Crypt
MaxSecureVirus.W32.GenericML.xnet
FortinetW32/VBClone.D!tr
BitDefenderThetaAI:Packer.30EF74A420
AVGWin32:VB-AJKU [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Barys.434151?

Barys.434151 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment