Trojan

Should I remove “Trojan:Win32/Barys.GMA!MTB”?

Malware Removal

The Trojan:Win32/Barys.GMA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/Barys.GMA!MTB virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family

How to determine Trojan:Win32/Barys.GMA!MTB?



File Info:

name: 5F14E45644E552D728DB.mlw
path: /opt/CAPEv2/storage/binaries/12d65e330dc364d016f6d33884ec52fddf99bfe291ff12f9b04a1f4f72e4fd06
crc32: 4C5C5BC9
md5: 5f14e45644e552d728db3d2887c94c62
sha1: 867ba7d2766c91f6d706efa3943ca06f5b0c58c6
sha256: 12d65e330dc364d016f6d33884ec52fddf99bfe291ff12f9b04a1f4f72e4fd06
sha512: ce168d2218328b7dc6d4d15144395802e82a41dc5153531236366a5babe6ef3a8bf4e96cc632c2d909376683ab96992c902a11aa51ba2ef46d954e6c8a7e32a9
ssdeep: 6144:+C3F5JTPNrOhAF6aZrw0sZ20W7cyqCxSngmMBqfycuPbUl0i5cD5J6b8pS0wULW:+CbJtO2D5gk0npM4dl0v5JHpS0wULW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CFA4DFB2B31C4EB1C9393273262BB246A7539856D939514E25ECC37E4527E3BC78B213
sha3_384: b436efbe81d573beedbcc2dd54f866a19905737927bf996dd020628fda7c311639071ca8189731d1f9483814f432715b
ep_bytes: 562670bd067fc43a03aefdabc1ed9511
timestamp: 1971-05-16 00:00:00


Version Info:

CompanyName: Wayne J. Radburn
FileDescription: PE/COFF File Viewer
FileVersion: 0.9.9.0
InternalName: PEview
LegalCopyright: Copyright© 1997-2011 Wayne J. Radburn
OriginalFilename: PEview.exe
ProductName: PEview
ProductVersion: 0.9.9.0
Translation: 0x0409 0x04e4

Trojan:Win32/Barys.GMA!MTB also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanDeepScan:Generic.Dacic.8952383F.A.C76ED722
FireEyeGeneric.mg.5f14e45644e552d7
CAT-QuickHealTrojan.Barys.S32246494
SkyhighBehavesLike.Win32.RAHack.gc
McAfeeTrojan-FVOQ!5F14E45644E5
MalwarebytesGeneric.Malware.AI.DDS
VIPREDeepScan:Generic.Dacic.8952383F.A.C76ED722
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0001b3411 )
K7GWTrojan ( 0001b3411 )
Cybereasonmalicious.2766c9
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HHBK
APEXMalicious
ClamAVWin.Packed.Razy-9786051-0
KasperskyVHO:Trojan.Win32.Copak.gen
BitDefenderDeepScan:Generic.Dacic.8952383F.A.C76ED722
NANO-AntivirusTrojan.Win32.Kryptik.foobtk
AvastWin32:TrojanX-gen [Trj]
TencentTrojan.Win32.Kryptik.gify
TACHYONTrojan/W32.Selfmod
EmsisoftDeepScan:Generic.Dacic.8952383F.A.C76ED722 (B)
F-SecureTrojan.TR/Patched.Ren.Gen
DrWebTrojan.Siggen26.63891
ZillyaTrojan.Kryptik.Win32.3766585
Trapminemalicious.high.ml.score
SophosMal/Inject-GJ
IkarusTrojan.Patched
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Patched.Ren.Gen
VaristW32/Dacic.E.gen!Eldorado
Antiy-AVLGrayWare/Win32.Kryptik.gifq
Kingsoftmalware.kb.a.953
MicrosoftTrojan:Win32/Barys.GMA!MTB
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitDeepScan:Generic.Dacic.8952383F.A.C76ED722
ZoneAlarmVHO:Trojan.Win32.Copak.gen
GDataWin32.Trojan.PSE.109W4IM
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZexaF.36744.C43@aazQJtd
ALYacDeepScan:Generic.Dacic.8952383F.A.C76ED722
MAXmalware (ai score=83)
VBA32Trojan.Khalesi
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
YandexTrojan.Agent!RRuFJhSd6qY
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan:Win32/Barys.GMA!MTB?

Trojan:Win32/Barys.GMA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment