Trojan

About “Trojan:Win32/Barys.GMA!MTB” infection

Malware Removal

The Trojan:Win32/Barys.GMA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/Barys.GMA!MTB virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:Win32/Barys.GMA!MTB?



File Info:

name: 6A064AC4B9E50E23FCE9.mlw
path: /opt/CAPEv2/storage/binaries/34121bfdd5e092c4707c0962168f6f74d0215b21c6373c18015827f214f249cd
crc32: 122033EA
md5: 6a064ac4b9e50e23fce99f138db1f270
sha1: fd4675cd11529a082d292dfe679fd435f7f3a090
sha256: 34121bfdd5e092c4707c0962168f6f74d0215b21c6373c18015827f214f249cd
sha512: 377e46147402134905da40019bcaef1328d9c87a0919ad2b22195ebbf4d6f33663434a69b3fb3f20feb66bdb3cc5ad55ab4767d38e3c6a09b31364ef8c7b37a0
ssdeep: 6144:U/R/54SmpfQLBCrEBjC+uE2QJexJ3OsZ20W7cyqCxSngmMBqfycuPbUl0i5cD5J:CRzUf2C+uX6Hgk0npM4dl0v5J
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19D84DF97B2AFCF21DB39A333227BB345AE419416C93AA00D52DD8B4E0617E7785DF250
sha3_384: 0ff6c367f773d969dcec5a53641eb74d83a61d7bdd84a49fb2fec40995da8fab7c1b3d3a1f1d033d1b07d3b6aae3f13e
ep_bytes: c087526790dee6e0950fdf71574cb7cb
timestamp: 1971-05-16 00:00:00


Version Info:

CompanyName: Wayne J. Radburn
FileDescription: PE/COFF File Viewer
FileVersion: 0.9.9.0
InternalName: PEview
LegalCopyright: Copyright© 1997-2011 Wayne J. Radburn
OriginalFilename: PEview.exe
ProductName: PEview
ProductVersion: 0.9.9.0
Translation: 0x0409 0x04e4

Trojan:Win32/Barys.GMA!MTB also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Lazy.429004
ClamAVWin.Packed.Razy-9786051-0
SkyhighBehavesLike.Win32.Generic.fc
McAfeeTrojan-FVOQ!6A064AC4B9E5
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Lazy.429004
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0001b3411 )
K7GWTrojan ( 0001b3411 )
Cybereasonmalicious.d11529
BitDefenderThetaGen:NN.ZexaF.36680.y43@aazQJtd
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik_AGen.BGV
APEXMalicious
CynetMalicious (score: 100)
KasperskyVHO:Trojan.Win32.Copak.gen
BitDefenderGen:Variant.Lazy.429004
NANO-AntivirusTrojan.Win32.Kryptik.foobtk
AvastWin32:TrojanX-gen [Trj]
EmsisoftGen:Variant.Lazy.429004 (B)
F-SecureTrojan.TR/Patched.Ren.Gen
ZillyaTrojan.Kryptik.Win32.3766585
SophosMal/Inject-GJ
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Patched.Ren.Gen
Antiy-AVLGrayWare/Win32.Kryptik.gifq
Kingsoftmalware.kb.a.906
MicrosoftTrojan:Win32/Barys.GMA!MTB
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Lazy.D68BCC
ZoneAlarmVHO:Trojan.Win32.Copak.gen
GDataWin32.Trojan.PSE.109W4IM
VaristW32/Dacic.E.gen!Eldorado
Acronissuspicious
VBA32Trojan.Khalesi
TACHYONTrojan/W32.Selfmod
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
IkarusTrojan.Patched
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan:Win32/Barys.GMA!MTB?

Trojan:Win32/Barys.GMA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment