How to remove “Barys.53924”?

The Barys.53924 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Barys.53924 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Barys.53924?


File Info:
crc32: 841A5CFE
md5: f77ef3fe1c46b69f5612cd9634cf6d10
name: F77EF3FE1C46B69F5612CD9634CF6D10.mlw
sha1: 4ea7e56e8d83dca257b7b13aff6990877873b7f9
sha256: 9dfd2b3aa2ccb2b72b53066d56ad77605c7e505cf69d6d886d58db67afc9b21a
sha512: dec66621f59877fc7b125eb0ff21a969cbdfb08c021eb4ea33ec3db605f5e4dbcb9f4dbfcdef4dcdc4cde4163d2d3ed5fee342e481af409c4466772944849862
ssdeep: 24576:DfNfz4b1qO/d7Xi6IL4l6NO4DKaAMUkh5JOrk6k13fe9:Zsb1qOFjm44DYMUkLJOrk6k13fe9
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: CVS Health Corp.
Assembly Version: 20.21.0.0
InternalName: x5b59u.exe
FileVersion: 20.21.0.0
CompanyName: Biogen Inc. (BIIB)
LegalTrademarks: 
Comments: Bristol Myers Squibb
ProductName: Nursery Management System
ProductVersion: 20.21.0.0
FileDescription: Nursery Management System
OriginalFilename: x5b59u.exe

Barys.53924 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.405
MicroWorld-eScan	Gen:Variant.Barys.53924
FireEye	Generic.mg.f77ef3fe1c46b69f
CAT-QuickHeal	Trojan.Multi
ALYac	Backdoor.RAT.MSIL.NanoCore
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Barys.53924
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.e1c46b
BitDefenderTheta	Gen:NN.ZemsilF.34700.6u0@a0P1Mun
Cyren	W32/MSIL_Kryptik.CNY.gen!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Taskun.gen
Alibaba	Trojan:MSIL/GenKryptik.32bac8b9
Ad-Aware	Gen:Variant.Barys.53924
Emsisoft	Trojan.Agent (A)
Comodo	Malware@#3cntikqnzoyrl
McAfee-GW-Edition	BehavesLike.Win32.Packed.dc
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Kingsoft	Win32.Heur.KVMH008.a.(kcloud)
Microsoft	Trojan:Win32/Tnega!ml
Gridinsoft	Trojan.Heur!.03013281
Arcabit	Trojan.Barys.DD2A4
ZoneAlarm	HEUR:Trojan.MSIL.Taskun.gen
GData	Gen:Variant.Barys.53924
Cynet	Malicious (score: 100)
McAfee	Fareit-FXJ!F77EF3FE1C46
MAX	malware (ai score=84)
VBA32	CIL.HeapOverride.Heur
Malwarebytes	Trojan.MalPack
Panda	Trj/GdSda.A
ESET-NOD32	a variant of MSIL/GenKryptik.EZFP
TrendMicro-HouseCall	TROJ_GEN.R002H09LT20
Yandex	Trojan.AvsArher.bUx2VN
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/GenKryptik.EZFP!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_70% (D)
Qihoo-360	Generic/HEUR/QVM03.0.3F6E.Malware.Gen

How to remove Barys.53924?

Barys.53924 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X