Categories: Malware

What is “Barys.92242”?

The Barys.92242 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Barys.92242 virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Anomalous binary characteristics

How to determine Barys.92242?


File Info:
crc32: EEC92257md5: 84452e3633c40030e72c9375c8a3cacbname: 84452E3633C40030E72C9375C8A3CACB.mlwsha1: fe65853ff86e5783c3d70edcbe0771447967ab0csha256: f0a5b257f16c4ccff520365ebc143f09ccf233e642bf540b5b90a2bbdb43d5b4sha512: 519b8af4e4f1bca640b009307fb1528d617c7e00e06159fe30390c80b016f6e34b1391e367953e127d40c70ccb65da8c5ab5d311e6aefe7f2f3ee7de2b4aec7bssdeep: 3072:WfaJb/HHzTGsbVY6XfRPLlv3vJMiGndRRBmRKuvZVWrMeX7Y1:Tb/HzTXPJR3v9Gn3X8KsYr7Ytype: PE32+ executable (GUI) x86-64, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2016InternalName: sqhost.exeFileVersion: 2.0.0.0CompanyName: Microsoft CorporationProductName: sqhost.exeProductVersion: 2.0.0.0FileDescription: Host Process for Windows ServiceOriginalFilename: sqhost.exeTranslation: 0x0409 0x04b0

Barys.92242 also known as:

K7AntiVirus	Trojan ( 005735c41 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen11.35280
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Multi
ALYac	Gen:Variant.Barys.92242
Cylance	Unsafe
Zillya	Trojan.CoinMiner.Win64.3521
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win64/CoinMiner.d1c13457
K7GW	Trojan ( 005735c41 )
Cybereason	malicious.633c40
Cyren	W64/Coinminer.DB.gen!Eldorado
ESET-NOD32	a variant of Win64/CoinMiner.ADG
APEX	Malicious
Avast	Win64:DropperX-gen [Drp]
ClamAV	Win.Trojan.Prometei-9832077-1
Kaspersky	Trojan.Win32.Agent.xahfrs
BitDefender	Gen:Variant.Barys.92242
NANO-Antivirus	Trojan.Win64.CoinMiner.iqoljq
MicroWorld-eScan	Gen:Variant.Barys.92242
Tencent	Win64.Trojan.Coinminer.Dypx
Ad-Aware	Gen:Variant.Barys.92242
Sophos	Mal/Generic-R + Troj/Miner-AAZ
Comodo	Malware@#3vyxi473jylee
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Coinminer.Win64.MALXMR.TIAOODFT
McAfee-GW-Edition	BehavesLike.Win64.Virut.cc
FireEye	Generic.mg.84452e3633c40030
Emsisoft	Gen:Variant.Bulz.400582 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Staser.gxd
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1140127
eGambit	Unsafe.AI_Score_83%
Microsoft	Trojan:Script/Phonzy.A!ml
Arcabit	Trojan.Bulz.D61CC6
AegisLab	Trojan.Win32.Malicious.4!c
ZoneAlarm	Trojan.Win32.Agent.xahfrs
GData	Gen:Variant.Barys.92242
AhnLab-V3	Trojan/Win64.CoinMiner.R357164
McAfee	Artemis!84452E3633C4
MAX	malware (ai score=87)
VBA32	Trojan.Script.Phonzy
Malwarebytes	Trojan.BitCoinMiner
Panda	Trj/RnkBend.A
TrendMicro-HouseCall	Coinminer.Win64.MALXMR.TIAOODFT
Rising	Trojan.Agent!8.B1E (CLOUD)
Yandex	Trojan.Agent!pePMUGtt95U
Ikarus	Trojan.Win64.CoinMiner
Fortinet	W64/CoinMiner.ADG!tr
AVG	Win64:DropperX-gen [Drp]
Paloalto	generic.ml
Qihoo-360	Win64/TrojanDropper.Generic.HgEASREA