Barys.761 removal guide

The Barys.761 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Barys.761 virus can do?

CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with SmartAssembly
Authenticode signature is invalid

How to determine Barys.761?


File Info:
name: 7931791592F51DA796E9.mlw
path: /opt/CAPEv2/storage/binaries/9c823353a6aa435d69d807dcf82f97936abe3d4861af07be9d9b212fe2b3ce9d
crc32: 0E7E3C6D
md5: 7931791592f51da796e98ae678a2dc6b
sha1: 1e39d1987c60793c00dcac72b5fb31e42bc22b14
sha256: 9c823353a6aa435d69d807dcf82f97936abe3d4861af07be9d9b212fe2b3ce9d
sha512: 91c2e00dd2eebce0dea713dc17d9dc156506c2d7dd191556d651f0bc104d2218097bf1fefebc0a756ab2fc81be8edc9aa89c1f9e5eca5095ab14428a40c094c9
ssdeep: 12288:qnjoNt1s2YzdOjwnWZQzjFeM6DJOjB9sTTHy6QxpGwANOKBi3CyaaKGmuo+6Ti5W:Nqz0EnYQb6VONANVtftGd6i
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D6553BF4A0AB04E9F80B6DC5697CBDE6427271F38DC90D20237DB6044FABD696E0594B
sha3_384: 0857bc182addac7fdda4b0941afe965ae3badbb8bda045d00cbc216d210df38faf82446f3f53da49efdbc0ad04cf0fd6
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-10-05 16:41:06

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: azne.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: azne.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Barys.761 also known as:

DrWeb	Trojan.PackedNET.1603
MicroWorld-eScan	Gen:Variant.Barys.761
FireEye	Generic.mg.7931791592f51da7
ALYac	Gen:Variant.Barys.761
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZemsilF.34698.vn0@aCb6rQd
Cyren	W32/MSIL_Kryptik.IAY.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.NKC
APEX	Malicious
Kaspersky	UDS:Backdoor.MSIL.DcRat.gen
BitDefender	Gen:Variant.Barys.761
Avast	RATX-gen [Trj]
Ad-Aware	Gen:Variant.Barys.761
Emsisoft	Gen:Variant.Barys.761 (B)
VIPRE	Gen:Variant.Barys.761
McAfee-GW-Edition	BehavesLike.Win32.Generic.tz
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Google	Detected
MAX	malware (ai score=88)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Barys.761
GData	Gen:Variant.Barys.761
Cynet	Malicious (score: 100)
Malwarebytes	Spyware.Stealer.MSIL
MaxSecure	Trojan.Malware.300983.susgen
AVG	RATX-gen [Trj]
Cybereason	malicious.592f51

How to remove Barys.761?

Barys.761 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X