Malware

Barys.51487 (B) information

Malware Removal

The Barys.51487 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Barys.51487 (B) virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Barys.51487 (B)?



File Info:

name: 8D4001C5D0ACFAC1CE82.mlw
path: /opt/CAPEv2/storage/binaries/15f3c807d42f6e3ce5ca81ddf4c179e5570a958cf33b4fa9189c4e9b1401cb2f
crc32: 31C2A27E
md5: 8d4001c5d0acfac1ce82c0e2bfb3219f
sha1: 688eb4f5ab1298f523d500db46d2ac0960e2b61a
sha256: 15f3c807d42f6e3ce5ca81ddf4c179e5570a958cf33b4fa9189c4e9b1401cb2f
sha512: ac2a054e2b17f489fac989bb4748983878a53f3a468ffeb3def2eedd710d977188b362623c80870e49149bc9e704c5501225438e621dd666c000e82d15e1e5fa
ssdeep: 6144:baulPebsD8Ox0+QTErSYwU0nAqpYXbeh0Q4/I9XcVtr/Ap0lud4ys4PBeBYn9ecd:k+NJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T165548B3D589D6A304B72E2BFB684A41AF68089A337168D2B51C357D14E2F9037FCAD1D
sha3_384: 2c199abb8b575a6b4ac7416b5f5f4584bcf8e9ba03f54dcde1d8a91169c46400b07ef5496b1aab5ea6d7d607b8c732c2
ep_bytes: ff250020400000000000000000000000
timestamp: 2093-07-15 03:51:20


Version Info:

Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: fd
FileVersion: 1.0.0.0
InternalName: fd.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: fd.exe
ProductName: fd
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Barys.51487 (B) also known as:

LionicTrojan.MSIL.Crysan.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Barys.51487
FireEyeGeneric.mg.8d4001c5d0acfac1
ALYacGen:Variant.Barys.51487
MalwarebytesMalware.AI.4157291337
K7AntiVirusTrojan ( 0058b04d1 )
AlibabaBackdoor:MSIL/Crysan.ce2cfd67
K7GWTrojan ( 0058b04d1 )
Cybereasonmalicious.5d0acf
BitDefenderThetaGen:NN.ZemsilF.34062.rm0@am3L5Uc
CyrenW32/MSIL_Kryptik.GFJ.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of MSIL/GenKryptik.FOCV
TrendMicro-HouseCallTROJ_GEN.R002H0CKT21
Paloaltogeneric.ml
KasperskyHEUR:Backdoor.MSIL.Crysan.gen
BitDefenderGen:Variant.Barys.51487
AvastWin32:RATX-gen [Trj]
TencentMsil.Backdoor.Crysan.Ecai
Ad-AwareGen:Variant.Barys.51487
EmsisoftGen:Variant.Barys.51487 (B)
DrWebBackDoor.Bladabindi.15771
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
IkarusTrojan.MSIL.Krypt
GDataGen:Variant.Barys.51487
JiangminBackdoor.MSIL.fhfh
WebrootW32.Trojan.Gen
AviraTR/Dropper.Gen
MAXmalware (ai score=80)
ArcabitTrojan.Barys.DC91F
APEXMalicious
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C4797756
McAfeeArtemis!8D4001C5D0AC
VBA32TScope.Trojan.MSIL
YandexTrojan.GenKryptik!wYBG8DK9gps
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenKryptik.FOCV!tr
AVGWin32:RATX-gen [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Barys.51487 (B)?

Barys.51487 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment