Win32/Bayrob.CK removal tips

The Win32/Bayrob.CK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Bayrob.CK virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32/Bayrob.CK?


File Info:
name: 56FAA98079D906CBB3A3.mlw
path: /opt/CAPEv2/storage/binaries/c104ac2f84a8fe8f8ca3bd4b2a8bb2930368a27fcd3879c49abeb2e909c23c91
crc32: FDB1FAB1
md5: 56faa98079d906cbb3a39a9e546900e9
sha1: b3f0eb43039bf17ac8b441b515374e79aea6a516
sha256: c104ac2f84a8fe8f8ca3bd4b2a8bb2930368a27fcd3879c49abeb2e909c23c91
sha512: 44c1a66c6310199b4d247371c968b95fc9f8b6f4ceeb0ed0f340704a3f6e0e8b5e594fedfe161c9ef05db6a9ad9ddeb476eaaa38e2d8ea86c4d6aba16b98c3a9
ssdeep: 24576:qLiB2X7WuykL1e+/LRzMTDEPuBYUYI7SxmDCATVqzzT5+:quk7W6rqE2BZAoao
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C225CF12B2C3D037C88A29F8019EF32199AD147893B199EBE79114FDF5D06C1AA7725F
sha3_384: 1b7770fa7929553d9853945a9271ebcc604ee2ce946193e2841e9d09df892512c7d11e9b6d0a10c91e623dca03f52c75
ep_bytes: e8aa9e0000e989feffff8bff558bec8b
timestamp: 2014-09-21 14:18:52

Version Info:
0: [No Data]

Win32/Bayrob.CK also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader21.54648
MicroWorld-eScan	Gen:Variant.Zusy.179369
ALYac	Gen:Variant.Zusy.179369
Zillya	Trojan.Generic.Win32.808040
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004f8fbb1 )
BitDefender	Gen:Variant.Zusy.179369
K7GW	Trojan ( 004f8fbb1 )
Cybereason	malicious.079d90
Cyren	W32/Nivdort.M.gen!Eldorado
Symantec	Trojan.Bayrob!gen9
ESET-NOD32	a variant of Win32/Bayrob.CK
NANO-Antivirus	Trojan.Win32.Bayrob.fqdflu
Ad-Aware	Gen:Variant.Zusy.179369
Sophos	ML/PE-A + Mal/Bayrob-C
Baidu	Win32.Trojan.Bayrob.c
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
SentinelOne	Static AI – Malicious PE
FireEye	Generic.mg.56faa98079d906cb
Emsisoft	Gen:Variant.Zusy.179369 (B)
GData	Gen:Variant.Zusy.179369
Jiangmin	Trojan.Generic.abqoj
Antiy-AVL	Trojan/Generic.ASMalwS.18BE0F6
Arcabit	Trojan.Zusy.D2BCA9
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Nivdort.C1321145
Acronis	suspicious
McAfee	GenericRXDW-HL!56FAA98079D9
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Nivdort
Malwarebytes	Trojan.Bayrob.Generic
APEX	Malicious
Rising	Trojan.Generic@ML.100 (RDML:GCJQELiwhuABZSTVKqw6Wg)
Fortinet	W32/Bayrob.BL!tr
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_80% (D)

How to remove Win32/Bayrob.CK?

Win32/Bayrob.CK removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X