Barys.54342 (file analysis)

The Barys.54342 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Barys.54342 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Barys.54342?


File Info:
crc32: DF7C869E
md5: 66a7cf8af506b1b56d0dc5a89679d17d
name: 66A7CF8AF506B1B56D0DC5A89679D17D.mlw
sha1: 6202e1248e28387c5d029efcaf83118ebaa1a772
sha256: d68aefc0f0733cbca2eea9a1fbae6ea471f273c12dfc3048f54d7fe38e601062
sha512: fe855f765738fd9629b11c11774b40c441050313335deeeed76ede62a687aa0b220b317f95d4eabfe6dbdd91beb3441fe39081875bcb28a12487bb27fbc003f2
ssdeep: 3072:KLrL+gctfqqsxOiMGhzpRK8FgKPgrKH6mEtNkbhqfBiMWPBGSRVWpiQaxwW8bzG:G4DGdY94BEpNbzQ8sge
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Fickle Mambo 1996-2011
InternalName: Spicy Harv Kilo Rakes Kites
FileVersion: 10.2
CompanyName: Keg Guru Sheaf Dimly Rug Spent
ProductName: Alger Sly Cough
ProductVersion: 10.2
FileDescription: Boa
OriginalFilename: Hash.exe
Translation: 0x0409 0x04b0

Barys.54342 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0052ef101 )
Lionic	Trojan.Win32.Generic.4!c
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Barys.54342
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Barys.7ca7cccf
K7GW	Trojan ( 0052ef101 )
Cybereason	malicious.af506b
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Barys.54342
NANO-Antivirus	Trojan.Win32.Qhost.dtwoh
MicroWorld-eScan	Gen:Variant.Barys.54342
Ad-Aware	Gen:Variant.Barys.54342
Sophos	Mal/EncPk-AAT
F-Secure	Trojan.TR/Barys.xnhi
BitDefenderTheta	Gen:NN.ZexaF.34170.xC0@a8HVY1ai
VIPRE	Trojan.Win32.EncPk.acl (v)
McAfee-GW-Edition	BehavesLike.Win32.Generic.fz
FireEye	Generic.mg.66a7cf8af506b1b5
Emsisoft	Gen:Variant.Barys.54342 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Qhost.dgd
Avira	TR/Barys.xnhi
eGambit	Generic.Malware
Antiy-AVL	Trojan/Win32.TSGeneric
Microsoft	Trojan:Win32/Dynamer!ac
Arcabit	Trojan.Barys.DD446
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Barys.54342
McAfee	Artemis!66A7CF8AF506
MAX	malware (ai score=100)
VBA32	Malware-Cryptor.Hlux.2
Malwarebytes	Malware.Heuristic.1001
Panda	Trj/CI.A
Rising	Trojan.Generic@ML.96 (RDML:VW7sRhwD9MJ3ivMEde+7TQ)
Ikarus	Trojan.Win32.Ransom
Fortinet	W32/Gimemo.CEH!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Barys.54342?

Barys.54342 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X