Barys.57395 removal

The Barys.57395 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Barys.57395 virus can do?

Network activity detected but not expressed in API logs

How to determine Barys.57395?


File Info:
crc32: 10240336
md5: 4422035be4dc24834a680066d6ed4a7c
name: 4422035BE4DC24834A680066D6ED4A7C.mlw
sha1: 702cfc2da38f2d2acf0824efb64b34e3b0fdcef2
sha256: 24961c750b0492a049057e5997ce61d187a0c05851abb988db27aa0a3eeccb78
sha512: 144117f747f9f5f2d4e7455ac779fcbfc1912e6cca4ad7afab963c20cc954991c968dc4b306e7417eded176cb7c7497babb013f74f20bdc83589cb6defea5ee2
ssdeep: 12288:eim27AaGo+Ic2uI1si6mV0dAiRQ+ukYD5tx5GkWkik+kLRvDmkeCaD5CY3Pck7D:e9aGo+Ic2uI1si6mRiRgtqvBBBy/zXj
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
InternalName: ayhoxjabem
ProductVersion: 4.0.246.46572
OriginalFilename: ayhoxjabem.exe
FileVersion: 4.0.246.46572
Translation: 0x0409 0x04b0

Barys.57395 also known as:

K7AntiVirus	Adware ( 005820f61 )
Lionic	Adware.Win32.Hpdefender.2!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Barys.57395
Cylance	Unsafe
Zillya	Adware.Hpdefender.Win32.19
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	AdWare:Win32/Hpdefender.f3aeb5d4
K7GW	Adware ( 005820f61 )
Cybereason	malicious.be4dc2
Symantec	PUA.HomepageDefender
ESET-NOD32	a variant of Win32/Adware.HPDefender.CCE
APEX	Malicious
Avast	FileRepMalware
Kaspersky	not-a-virus:VHO:AdWare.Win32.Hpdefender.gen
BitDefender	Gen:Variant.Barys.57395
NANO-Antivirus	Riskware.Win32.HPDefender.euryui
MicroWorld-eScan	Gen:Variant.Barys.57395
Ad-Aware	Gen:Variant.Barys.57395
Sophos	Generic PUA HA (PUA)
Comodo	ApplicUnwnt@#2zvm2v6ismu0c
BitDefenderTheta	Gen:NN.ZexaE.34266.jD0@aenvj!ni
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.tm
FireEye	Generic.mg.4422035be4dc2483
Emsisoft	Gen:Variant.Barys.57395 (B)
Jiangmin	AdWare.Hpdefender.bdm
Avira	HEUR/AGEN.1103337
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Occamy.C24
GData	Gen:Variant.Barys.57395
AhnLab-V3	Malware/Win32.Generic.C2351449
McAfee	GenericRXDD-HP!4422035BE4DC
MAX	malware (ai score=100)
VBA32	BScope.Adware.Hpdefender
Panda	Trj/GdSda.A
Rising	Trojan.Generic@ML.100 (RDML:uJN/4KhIA2HPizI4y23LUQ)
Yandex	Trojan.GenAsa!LH9NbU0UkkE
Ikarus	PUA.HPDefender
Fortinet	Riskware/HPDefender
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Barys.57395?

Barys.57395 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X