Barys.875 (B) malicious file

The Barys.875 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.875 (B) virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Barys.875 (B)?


File Info:
crc32: CC15DFEF
md5: 78ae2bb47e68026583b48b2f93c7c00d
name: 78AE2BB47E68026583B48B2F93C7C00D.mlw
sha1: 93c92695574540ac6f927818ea2814e614b44c9b
sha256: cde072db2b4374550769689ef072dba357436e36d2e75c1398d24896e0deaeb1
sha512: d1aef3116b1949ea566f4d75cf12b97d29aba6f52a9714688414be8d7e064a0d4e4f099f1527293051a7c13ffa4117273ede055a2d9ce40decc9aa88b75577dc
ssdeep: 3072:7Ry57fNFtZVQJ+ODFqBQoFD+8cUlbGZ1KwLTHoia6riP/462uO4foE6Y/cd65pF:79W08DIWYM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: WABMIG.EXE
FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.19041.1
FileDescription: Microsoft (R) Contacts Import Tool
OriginalFilename: WABMIG.EXE
Translation: 0x0409 0x04b0

Barys.875 (B) also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen13.14838
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Barys.875
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.47e680
ESET-NOD32	a variant of MSIL/GenKryptik.FEVA
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
BitDefender	Gen:Variant.Barys.875
MicroWorld-eScan	Gen:Variant.Barys.875
Ad-Aware	Gen:Variant.Barys.875
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34686.1n0@aGmPt3di
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tz
FireEye	Generic.mg.78ae2bb47e680265
Emsisoft	Gen:Variant.Barys.875 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/AgentTesla!ml
Arcabit	Trojan.Barys.875
AegisLab	Trojan.MSIL.Remcos.m!c
GData	Gen:Variant.Barys.875
AhnLab-V3	Trojan/Win.Remcos.R418486
McAfee	Artemis!78AE2BB47E68
MAX	malware (ai score=82)
Malwarebytes	MachineLearning/Anomalous.100%
Rising	Trojan.AgentTesla!8.104D5 (CLOUD)
eGambit	Unsafe.AI_Score_61%
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml

How to remove Barys.875 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Barys.875 (B) malicious file