Categories: Malware

How to remove “Babar.100210”?

The Babar.100210 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.100210 virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Babar.100210?


File Info:
name: 2F5E7D19335F9DC2AA9A.mlwpath: /opt/CAPEv2/storage/binaries/59dd772ad38e5c801fbd3b029bde5c913aaa4c525bc29a22c6f4f064aedaa3b7crc32: 9F18BC30md5: 2f5e7d19335f9dc2aa9ac03430f4acbcsha1: 0ba5453036421c3a9b4329e46d9032aff6a7de3fsha256: 59dd772ad38e5c801fbd3b029bde5c913aaa4c525bc29a22c6f4f064aedaa3b7sha512: d1999aa812ab58ac3f0353b9bb0b30bb068f51d693b003f1102f8794d2265b08b277aa24935cb965c15dd7d5a760c93461d40339549ea393e9ed4064c67afa06ssdeep: 49152:/RjO62o8UjTHDlmwfnvU3Bz81+QCRfGVVa+pAFBQrVHiK37:ZimDl1vU3Bz++QCdGVs+pIQpCKrtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T135B5237B8B0589CB67E144EEA7F41209357C9E510FF380BA8B66BE058B681C0CD51FA7sha3_384: d88a51758b169c06840ed3cc4a15a7097e14984f16ad42a1bfea2a9ae953db7933e8d1414f5008ff2e4dae2a385e8ad3ep_bytes: 414951595159424a474f525a424a5058timestamp: 2018-03-22 20:44:51
Version Info:
0: [No Data]

Babar.100210 also known as:

Bkav	W32.AIDetect.malware1
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Babar.100210
FireEye	Generic.mg.2f5e7d19335f9dc2
CAT-QuickHeal	Trojan.Generic.A1
ALYac	Gen:Variant.Babar.100210
Cylance	Unsafe
Zillya	Trojan.Injector.Win32.595497
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 00536d121 )
K7GW	Trojan ( 00536d121 )
Cybereason	malicious.9335f9
Arcabit	Trojan.Babar.D18772
Cyren	W32/Injector.ACA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.DPAH
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Inject.pef
BitDefender	Gen:Variant.Babar.100210
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
Avast	Win32:Evo-gen [Trj]
Tencent	Win32.Trojan.Inject.Zwhl
Ad-Aware	Gen:Variant.Babar.100210
Sophos	ML/PE-A + Troj/Inject-IAL
Comodo	TrojWare.Win32.VirRansom.A@7fqw7c
DrWeb	Trojan.DownLoad4.10372
VIPRE	Gen:Variant.Babar.100210
TrendMicro	Mal_MLWR-1
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.vc
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Babar.100210 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.cavqx
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=99)
Antiy-AVL	Trojan/Generic.ASBOL.C659
Microsoft	Trojan:Win32/Occamy.B
GData	Gen:Variant.Babar.100210
Google	Detected
AhnLab-V3	Trojan/Win32.Generic.C2035182
McAfee	Packed-XV!2F5E7D19335F
VBA32	Trojan.Cloxer
Malwarebytes	Malware.Heuristic.1004
TrendMicro-HouseCall	Mal_MLWR-1
Rising	Trojan.Injector!1.AF22 (CLASSIC)
Ikarus	Trojan.Win32.Injector
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Injector.DPAH!tr
BitDefenderTheta	AI:Packer.BC60EF1B1E
AVG	Win32:Evo-gen [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (W)