Barys.57587 (B) removal tips

The Barys.57587 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.57587 (B) virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• CAPE detected the njRat malware family

How to determine Barys.57587 (B)?

File Info:
name: 221978F40CD5BEBE1008.mlw
path: /opt/CAPEv2/storage/binaries/e9db440236f8fe05f56fee7b048376aa72934d86f5493dac0417bd6766e1c67a
crc32: D4A080DA
md5: 221978f40cd5bebe10088c1edc3064cd
sha1: 80ee9957ea7be06c080907b3ee71040de3dd48b0
sha256: e9db440236f8fe05f56fee7b048376aa72934d86f5493dac0417bd6766e1c67a
sha512: 40149623f892bf532875b84f03ee0d7c766bba2120f4a1f198b273b09cd31fbbfbb8501bbbf880c331b41dcdd8dc62e09207112c50bc516ffa7e3af7fd659cc8
ssdeep: 12288:CoGvYkTKhSFIpzKhgbCNyNBOLZ8sd6fs755lU/PW6lEmM+42Kg1IuBle6NgQSHFv:CvTKhSWzKheCNZWuEFFKg1IiQEqt6nzm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E0455C83F7C350F0EE8315B415FBA73ADA60B30487269DC7D3543EC66A212D16B3A696
sha3_384: 90107c97c4e2343a7ca950e956258ae5edf7cc528e05b40dd8dc51bd63405f298ed2618bd3ad9a9054dfe091277d58a9
ep_bytes: c3000000000000000000000000000000
timestamp: 2021-06-25 12:47:45

Version Info:
0: [No Data]

Barys.57587 (B) also known as:

How to remove Barys.57587 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.