About "Barys.5417" infection

The Barys.5417 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.5417 virus can do?

Executable code extraction
Unconventionial language used in binary resources: Spanish (Modern)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Barys.5417?


File Info:
crc32: 0ADADB68
md5: bcbf91c58cc0fc3d1d0808deb98a0b8d
name: BCBF91C58CC0FC3D1D0808DEB98A0B8D.mlw
sha1: cf490dc30a1e4946925190f6e1570538f5474504
sha256: 1faf6e930945f95a79fddf452ce109f662775a109912025a979628b206dea24c
sha512: 137584811545d8462e8f4bc6aa7513660a7a8ba76c26b08dded4e4a34c0ded4a39f7bb033479d66c2a5a9f7a69e2685607e956afaa7a92449c613358f42a2489
ssdeep: 768:h13k9+5loqd4o3D19iS9cxcOIjeViybIPybIjybImybIeybI6ybIw:hM0LdhrexcOIjjJ14AEw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0c0a 0x04b0
LegalCopyright:    Badoo. Entra. Destaca. xa1Consigue fans!     /* inline source: https://pd2us.badoocdn.com/i/v2/-/-/js/hon_v3/assets/css/ltr/-/css/hotornot_v2/base.critical.cc50e2aa878cdd15ee8d.css */ @-webkit-keyframes show0%opacity:0toopacity:1@keyframes show0%opacity:0toopacity:1@-webkit-keyframes hide0%opacity:1toopacity:0@keyframes hide0%opacity:1toopacity:0.loggerposition:relative;overflow:auto;width:100%;max-height:90vh;border:1px solid #fd7f7e;background:#fff.logger.is-collapsedposition:fixed;z-index:10000;overflow:hidden;width:50px;height:50px.logger.is-collapsed::afterposition:absolute;top:0;left:0;width:100%;height:100%;content:'!';background:#fd7f7e;color:#fff;text-align:center;font-size:30px;line-height:48pxa,abbr,acronym,address,applet,article,aside,b,big,blockquote,body,caption,center,cite,c
InternalName: stub
FileVersion: 4467.777.1112
CompanyName:    Badoo. Entra. Destaca. xa1Consigue fans!     /* inline source: https://pd2us.badoocdn.com/i/v2/-/-/js/hon_v3/assets/css/ltr/-/css/hotornot_v2/base.critical.cc50e2aa878cdd15ee8d.css */ @-webkit-keyframes show0%opacity:0toopacity:1@keyframes show0%opacity:0toopacity:1@-webkit-keyframes hide0%opacity:1toopacity:0@keyframes hide0%opacity:1toopacity:0.loggerposition:relative;overflow:auto;width:100%;max-height:90vh;border:1px solid #fd7f7e;background:#fff.logger.is-collapsedposition:fixed;z-index:10000;overflow:hidden;width:50px;height:50px.logger.is-collapsed::afterposition:absolute;top:0;left:0;width:100%;height:100%;content:'!';background:#fd7f7e;color:#fff;text-align:center;font-size:30px;line-height:48pxa,abbr,acronym,address,applet,article,aside,b,big,blockquote,body,caption,center,cite,code
LegalTrademarks:    Badoo. Entra. Destaca. xa1Consigue fans!     /* inline source: https://pd2us.badoocdn.com/i/v2/-/-/js/hon_v3/assets/css/ltr/-/css/hotornot_v2/base.critical.cc50e2aa878cdd15ee8d.css */ @-webkit-keyframes show0%opacity:0toopacity:1@keyframes show0%opacity:0toopacity:1@-webkit-keyframes hide0%opacity:1toopacity:0@keyframes hide0%opacity:1toopacity:0.loggerposition:relative;overflow:auto;width:100%;max-height:90vh;border:1px solid #fd7f7e;background:#fff.logger.is-collapsedposition:fixed;z-index:10000;overflow:hidden;width:50px;height:50px.logger.is-collapsed::afterposition:absolute;top:0;left:0;width:100%;height:100%;content:'!';background:#fd7f7e;color:#fff;text-align:center;font-size:30px;line-height:48pxa,abbr,acronym,address,applet,article,aside,b,big,blockquote,body,caption,center,cite,
Comments:    Badoo. Entra. Destaca. xa1Consigue fans!     /* inline source: https://pd2us.badoocdn.com/i/v2/-/-/js/hon_v3/assets/css/ltr/-/css/hotornot_v2/base.critical.cc50e2aa878cdd15ee8d.css */ @-webkit-keyframes show0%opacity:0toopacity:1@keyframes show0%opacity:0toopacity:1@-webkit-keyframes hide0%opacity:1toopacity:0@keyframes hide0%opacity:1toopacity:0.loggerposition:relative;overflow:auto;width:100%;max-height:90vh;border:1px solid #fd7f7e;background:#fff.logger.is-collapsedposition:fixed;z-index:10000;overflow:hidden;width:50px;height:50px.logger.is-collapsed::afterposition:absolute;top:0;left:0;width:100%;height:100%;content:'!';background:#fd7f7e;color:#fff;text-align:center;font-size:30px;line-height:48pxa,abbr,acronym,address,applet,article,aside,b,big,blockquote,body,caption,center,cite,code,dd
ProductName:    Badoo. Entra. Destaca. xa1Consigue fans!     /* inline source: https://pd2us.badoocdn.com/i/v2/-/-/js/hon_v3/assets/css/ltr/-/css/hotornot_v2/base.critical.cc50e2aa878cdd15ee8d.css */ @-webkit-keyframes show0%opacity:0toopacity:1@keyframes show0%opacity:0toopacity:1@-webkit-keyframes hide0%opacity:1toopacity:0@keyframes hide0%opacity:1toopacity:0.loggerposition:relative;overflow:auto;width:100%;max-height:90vh;border:1px solid #fd7f7e;background:#fff.logger.is-collapsedposition:fixed;z-index:10000;overflow:hidden;width:50px;height:50px.logger.is-collapsed::afterposition:absolute;top:0;left:0;width:100%;height:100%;content:'!';background:#fd7f7e;color:#fff;text-align:center;font-size:30px;line-height:48pxa,abbr,acronym,address,applet,article,aside,b,big,blockquote,body,caption,center,cite,code
ProductVersion: 4467.777.1112
FileDescription:    Badoo. Entra. Destaca. xa1Consigue fans!     /* inline source: https://pd2us.badoocdn.com/i/v2/-/-/js/hon_v3/assets/css/ltr/-/css/hotornot_v2/base.critical.cc50e2aa878cdd15ee8d.css */ @-webkit-keyframes show0%opacity:0toopacity:1@keyframes show0%opacity:0toopacity:1@-webkit-keyframes hide0%opacity:1toopacity:0@keyframes hide0%opacity:1toopacity:0.loggerposition:relative;overflow:auto;width:100%;max-height:90vh;border:1px solid #fd7f7e;background:#fff.logger.is-collapsedposition:fixed;z-index:10000;overflow:hidden;width:50px;height:50px.logger.is-collapsed::afterposition:absolute;top:0;left:0;width:100%;height:100%;content:'!';background:#fd7f7e;color:#fff;text-align:center;font-size:30px;line-height:48pxa,abbr,acronym,address,applet,article,aside,b,big,blockquote,body,caption,center,cite,
OriginalFilename: stub.exe

Barys.5417 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Barys.5417
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	VirTool:Win32/Vbinder.10c0481c
K7GW	Trojan ( 004e58da1 )
Cybereason	malicious.58cc0f
Cyren	W32/VBCrypt.A!Generic
ESET-NOD32	a variant of Win32/Injector.ZC
APEX	Malicious
Avast	Win32:VB-LJN [Drp]
ClamAV	Win.Trojan.Generic-8439775-0
Kaspersky	UDS:Trojan.Win32.VBKrypt
BitDefender	Gen:Variant.Barys.5417
MicroWorld-eScan	Gen:Variant.Barys.5417
Ad-Aware	Gen:Variant.Barys.5417
Sophos	Mal/Inject-H
BitDefenderTheta	AI:Packer.708967F01E
VIPRE	VirTool.Win32.Vbinder.gen.g (v)
McAfee-GW-Edition	BackDoor-DZP.b
FireEye	Generic.mg.bcbf91c58cc0fc3d
Emsisoft	Gen:Variant.Barys.5417 (B)
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_99%
Microsoft	VirTool:Win32/Vbinder.gen!G
Arcabit	Trojan.Barys.D1529
GData	Gen:Variant.Barys.5417
AhnLab-V3	Dropper/Win32.Typic.C118283
McAfee	BackDoor-DZP.b
MAX	malware (ai score=81)
VBA32	Malware-Cryptor.VB.gen.1
Malwarebytes	Trojan.MassLogger
Panda	Generic Malware
Rising	HackTool.Vbinder!8.4E7 (CLOUD)
Fortinet	W32/VBKrypt.C!tr
AVG	Win32:VB-LJN [Drp]

How to remove Barys.5417?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Barys.5417” infection