Categories: Malware

How to remove “Barys.79608”?

The Barys.79608 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.79608 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (3 unique times)
Creates RWX memory
Performs some HTTP requests
Unconventionial language used in binary resources: Norwegian (Nynorsk)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

telete.in

apps.identrust.com

chinarobotics2020.top

How to determine Barys.79608?


File Info:
crc32: ED4DF93Emd5: 2f0a3eb592f41646425e1ad26a462a06name: 2F0A3EB592F41646425E1AD26A462A06.mlwsha1: 860e4aa383f5cf23656ea6f4a8e8796dcf2d2f02sha256: 69aca21bacf69ee84faaec3df92478146836c6f8e2c75204ab9e046583a75497sha512: ac17b66e9f377cbcb7c1d08f29b177b96f51f21a2c15427c4bb1824a6fcf3c30963c78adde6e626d3e84045dff28a408635bf0d193920e0dcde41b953ccfc0e7ssdeep: 12288:8SEipR/GR4MLw6Mre8JofR5YIUa9kSCbrzj/OxAb3WI+cEW:8YRORotre8JUnW0kSCbvjWqmIyWtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
InternalName: triwylbikes.acsFileVers: 26.26.361ProductionVersion: 1.0.22.25Copyright: Copyrighz (C) 2020, padkafuxTranslationUsa: 0x8712 0x0081

Barys.79608 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Barys.79608
McAfee	RDN/Generic.dx
Cylance	Unsafe
AegisLab	Trojan.Win32.Zenpak.4!c
Sangfor	Malware
Alibaba	Backdoor:Win32/KZip.565247d4
K7GW	Trojan ( 005748c61 )
Cybereason	malicious.383f5c
Arcabit	Trojan.Barys.D136F8
BitDefenderTheta	Gen:NN.ZexaF.34688.ImKfaSCC61fG
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HIEV
APEX	Malicious
Kaspersky	Trojan.Win32.Zenpak.aztm
BitDefender	Gen:Variant.Barys.79608
Ad-Aware	Gen:Variant.Barys.79608
Sophos	Mal/Generic-S
DrWeb	Trojan.PWS.Siggen2.60836
McAfee-GW-Edition	BehavesLike.Win32.Trojan.hc
FireEye	Generic.mg.2f0a3eb592f41646
Emsisoft	Gen:Variant.Barys.79608 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_93%
MAX	malware (ai score=88)
Microsoft	Trojan:Win32/Azorult.FW!MTB
ZoneAlarm	Trojan.Win32.Zenpak.aztm
GData	Gen:Variant.Barys.79608
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Gen:Variant.Barys.79608
Malwarebytes	Trojan.MalPack.UPX
Panda	Trj/GdSda.A
Rising	Trojan.Kryptik!1.CFEE (CLASSIC)
Ikarus	Worm.Win32.Peerfrag
Fortinet	W32/GenKryptik.ERHN!tr
AVG	Win32:CoinminerX-gen [Trj]
Avast	Win32:CoinminerX-gen [Trj]
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	Win32/Trojan.00a