Malware

Barys.62378 (B) removal tips

Malware Removal

The Barys.62378 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Barys.62378 (B) virus can do?

  • Unconventionial language used in binary resources: Indonesian
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Barys.62378 (B)?


File Info:

name: F291B68A110994141E82.mlw
path: /opt/CAPEv2/storage/binaries/49d513f8a35ce03c29f3940ef4084412792ce7e5bb39ab20282440d022930aab
crc32: 502F4EE0
md5: f291b68a110994141e82b705f90c0a86
sha1: 89e2a4921d58149c3d28aab412d3373b4c109dde
sha256: 49d513f8a35ce03c29f3940ef4084412792ce7e5bb39ab20282440d022930aab
sha512: ba654f4bfae7fd019da9c3d116edf549e7029b2954fda2d216478dbd8b63b42d69d8f6702c9e313aa9fe35e1c2a325cd23d17c85a2ccdacb3d6c29ff9cab47e8
ssdeep: 24576:Xz5NzrNbWDAAL0KbFj+hPkVXgMiFfG9KkWpfTEahpr1VpT1crc:j5d6BjewXHVZUfTEmJm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T140857C1572119837C113A6FC6C37C769A42DBE3E2925658677A32C8C7F3B361B8391A3
sha3_384: cb584e904b7d64a42ff8c70ff241ae87982bddd3be757e564208e077757a61f8cc7e96fb529ca08313fbcac08f0fd505
ep_bytes: 558bec83c4f0b8f0b65000e83ca9efff
timestamp: 1992-06-19 22:22:17

Version Info:

CompanyName: Server Bayu
FileDescription: Server Bayu
FileVersion: 1.0.0.0
InternalName: Server Bayu
LegalCopyright: Server Bayu
LegalTrademarks: Server Bayu
OriginalFilename: Server Bayu
ProductName: Server Bayu
ProductVersion: 1.0.0.0
Comments: Server Bayu
Translation: 0x0421 0x04e4

Barys.62378 (B) also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanGen:Variant.Barys.62378
FireEyeGen:Variant.Barys.62378
SkyhighBehavesLike.Win32.BadFile.th
McAfeeArtemis!F291B68A1109
Cylanceunsafe
SangforTrojan.Win32.Agent.Vued
ArcabitTrojan.Barys.DF3AA
CynetMalicious (score: 100)
APEXMalicious
BitDefenderGen:Variant.Barys.62378
VIPREGen:Variant.Barys.62378
EmsisoftGen:Variant.Barys.62378 (B)
IkarusTrojan.VkHost
Antiy-AVLTrojan/Win32.Agent
Kingsoftmalware.kb.a.993
GDataGen:Variant.Barys.62378
GoogleDetected
ALYacGen:Variant.Barys.62378
MAXmalware (ai score=87)
VBA32BScope.Backdoor.Agent
MalwarebytesGeneric.Malware/Suspicious
TrendMicro-HouseCallTROJ_GEN.R002H09LO23
MaxSecureTrojan.Malware.221959696.susgen
FortinetW32/PossibleThreat
DeepInstinctMALICIOUS

How to remove Barys.62378 (B)?

Barys.62378 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment