Categories: Malware

About “Barys.54937” infection

The Barys.54937 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.54937 virus can do?

Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Clears Windows events or logs
Uses suspicious command line tools or Windows utilities

How to determine Barys.54937?


File Info:
crc32: F331075Amd5: c9761dcba7534fe90cc77f6c8954f5f5name: wkql.exesha1: 53de5cb4f10784e175e882c9b4761e68f1cf08b4sha256: a7c51b4bcda3d74d6bd475a22a579dcf602c0413d7c0208252d11f82d9fd27e2sha512: 58388bb205d1a5ca0e8403b03e7836e09595d0cb9d39ad81571ced670cdffb6ffaf0ebac14a4799bb92cadadd12465c3844b7f43c0b8c054cd62484edb78ade3ssdeep: 3072:s5ISAQcCBBlff0Bpm92HYrsatEaBiCSFOltHMUlsPP:s5IbQcmBlUBpmAHMB6qtUPtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248FileVersion: 1.0.0.0Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)ProductName: x6613x8bedx8a00x7a0bx5e8fProductVersion: 1.0.0.0FileDescription: x6613x8bedx8a00x7a0bx5e8fTranslation: 0x0804 0x04b0

Barys.54937 also known as:

MicroWorld-eScan	Gen:Variant.Barys.54937
FireEye	Generic.mg.c9761dcba7534fe9
McAfee	Artemis!C9761DCBA753
Cylance	Unsafe
Sangfor	Malware
BitDefender	Gen:Variant.Barys.54937
CrowdStrike	win/malicious_confidence_90% (W)
Invincea	heuristic
APEX	Malicious
GData	Win32.Trojan.Agent.WP
Kaspersky	UDS:DangerousObject.Multi.Generic
AegisLab	Trojan.Win32.Barys.4!c
Rising	Malware.Heuristic!ET#95% (RDMK:cmRtazpngOrYxx8NgP1+HcGRTbxG)
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Barys.54937 (B)
F-Secure	Heuristic.HEUR/AGEN.1025437
McAfee-GW-Edition	BehavesLike.Win32.PUPXDT.dm
Trapmine	malicious.high.ml.score
Sophos	Generic PUA FD (PUA)
Ikarus	AdWare.Win32.BlackMoon
Avira	HEUR/AGEN.1025437
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Barys.DD699
SUPERAntiSpyware	Trojan.Agent/Gen-OnlineGames
ZoneAlarm	UDS:DangerousObject.Multi.Generic
BitDefenderTheta	Gen:NN.ZexaF.34090.mq0@aO7KEHcb
ALYac	Gen:Variant.Barys.54937
VBA32	BScope.Backdoor.BlackMoon
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Ad-Aware	Gen:Variant.Barys.54937
AVG	FileRepMetagen [Malware]
Cybereason	malicious.ba7534
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.4a6