Categories: Malware

Barys.54138 malicious file

The Barys.54138 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.54138 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Sniffs keystrokes
A process was set to shut the system down when terminated
Installs itself for autorun at Windows startup
Likely virus infection of existing system binary
Creates a copy of itself

Related domains:

google-DNS.no-ip.info

How to determine Barys.54138?


File Info:
crc32: 6DF158AAmd5: 6fc84609625c4ddf7abd94209da4d68dname: 6FC84609625C4DDF7ABD94209DA4D68D.mlwsha1: 79aa094796c20f1c2392a7d6805e22cf7a5c0524sha256: dcb8bcea7240a4ff3d3e7299b51b8c4cadd94edace6672df4288b8bf4dcea9a4sha512: cc2453f28ef8b16742f9b4a26024c150c7b99e8589fd1f29870820af6f6060f49cdb9b2f8fff6f1b50cedf126aae98928581aa42b677112e09bc70a9f55ce671ssdeep: 768:GxZ0PBTrPd1JRm1lNeCCaD/EHHlkJ2TYWEu4mc1HAO2R7BdhkJNC:UZ0P5Pp85Cy/EHHuPkeHAO21BwJgtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
0: [No Data]

Barys.54138 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Barys.54138
ALYac	Gen:Variant.Barys.54138
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 700000121 )
BitDefender	Gen:Variant.Barys.54138
K7GW	Trojan ( 700000121 )
Cybereason	malicious.9625c4
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.ADY.ctqqfz
Ad-Aware	Gen:Variant.Barys.54138
Sophos	Mal/Generic-S
Comodo	Malware@#cje6m2xxeoia
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.DownLoader17.2745
McAfee-GW-Edition	BehavesLike.Win32.Generic.kh
MaxSecure	Trojan.Malware.300983.susgen
FireEye	Generic.mg.6fc84609625c4ddf
Emsisoft	Gen:Variant.Barys.54138 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.atchh
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Win32.AGeneric
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Backdoor:MSIL/Bladabindi
Arcabit	Trojan.Barys.DD37A
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Barys.54138
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.agent.C374478
McAfee	Artemis!6FC84609625C
MAX	malware (ai score=84)
Panda	Trj/CI.A
ESET-NOD32	a variant of MSIL/Injector.ADY
Tencent	Win32.Trojan.Generic.Wtxw
Yandex	Trojan.Agent!0i75Q9JLJcY
Ikarus	Trojan.Win32.Comrerop
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Injector.BQZ!tr
BitDefenderTheta	AI:Packer.3EC0BA7A25
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (D)
Qihoo-360	Win32/Trojan.3ea