Trojan

Trojan:Win32/Barys.GMA!MTB information

Malware Removal

The Trojan:Win32/Barys.GMA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/Barys.GMA!MTB virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/Barys.GMA!MTB?



File Info:

name: 41FFCA0AF5CD06FCD624.mlw
path: /opt/CAPEv2/storage/binaries/52ae5f80fb15b4aa597835a7f2be384dacbb06d8dd48b83663b7e046ab0d4334
crc32: 5998F42F
md5: 41ffca0af5cd06fcd624b41746df540e
sha1: bfd94c3f46646b6734e17a686ab7da9cded6642e
sha256: 52ae5f80fb15b4aa597835a7f2be384dacbb06d8dd48b83663b7e046ab0d4334
sha512: 9703d6ec4e024d5ce75a325aefb7aeca20345176b18564fa3693aabc7b8b7ecc05366c828c02a54146f3e85514b937ec16b1d4a9ae90c7118a2044c6b4e899d2
ssdeep: 6144:MDPcKFuxc55Y2UaM4r/RGTm53BDu0W7cyqCxSngmMBqfycuPbUl0i5j:MJu4W2JRGTm53p80npM4dl0s
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15D64DF8A738CBC64D6BC357BD0AEF7499190BD5EA6A5617F501BDF42C8A2C33365B200
sha3_384: c79316c7c895184bf22b691f59812aa263bbf5c815f3b435aa58e61dcdd44b8d467bf13893b069e90c5ee4b5812d0af7
ep_bytes: 69c88302399137853c400e14fe0366ae
timestamp: 1976-11-05 00:00:00


Version Info:

CompanyName: Wayne J. Radburn
FileDescription: PE/COFF File Viewer
FileVersion: 0.9.9.0
InternalName: PEview
LegalCopyright: Copyright© 1997-2011 Wayne J. Radburn
OriginalFilename: PEview.exe
ProductName: PEview
ProductVersion: 0.9.9.0
Translation: 0x0409 0x04e4

Trojan:Win32/Barys.GMA!MTB also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Lazy.428717
SkyhighBehavesLike.Win32.Picsys.fc
McAfeeTrojan-FVOQ!41FFCA0AF5CD
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Lazy.428717
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0001b3411 )
K7GWTrojan ( 0001b3411 )
Cybereasonmalicious.f46646
ArcabitTrojan.Lazy.D68AAD
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik_AGen.BGV
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Packed.Razy-9794901-0
KasperskyUDS:Trojan.Win32.Copak.axpma
BitDefenderGen:Variant.Lazy.428717
NANO-AntivirusTrojan.Win32.Kryptik.foobtk
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.Kryptik.gify
EmsisoftGen:Variant.Lazy.428717 (B)
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.Siggen23.16832
ZillyaTrojan.Kryptik.Win32.3766585
SophosMal/Inject-GJ
IkarusTrojan.Patched
WebrootW32.Trojan.Gen
VaristW32/Dacic.E.gen!Eldorado
AviraTR/Dropper.Gen
Antiy-AVLGrayWare/Win32.Kryptik.gifq
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
MicrosoftTrojan:Win32/Barys.GMA!MTB
ZoneAlarmUDS:Trojan.Win32.Copak.axpma
GDataWin32.Trojan.PSE.109W4IM
GoogleDetected
AhnLab-V3Trojan/Win.FVOQ.R628622
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.36680.u83@aS09i7l
TACHYONTrojan/W32.Selfmod
VBA32Trojan.Khalesi
Cylanceunsafe
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.B34D (CLASSIC)
YandexTrojan.Kryptik_AGen!BwaCmPZVnhs
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan:Win32/Barys.GMA!MTB?

Trojan:Win32/Barys.GMA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment