Babar.110899 removal guide

The Babar.110899 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.110899 virus can do?

Authenticode signature is invalid

How to determine Babar.110899?


File Info:
name: 361D068711685696BEE6.mlw
path: /opt/CAPEv2/storage/binaries/5d832759045200d653bee5519e565e9010324ae4c0cf3ffda328219b66e67e7d
crc32: B63D1BA9
md5: 361d068711685696bee642a4a6b5e837
sha1: b50693c8427d3c6553ffa2edce97df7d7c67a13e
sha256: 5d832759045200d653bee5519e565e9010324ae4c0cf3ffda328219b66e67e7d
sha512: ce1ff53844babd93027212929dc448be330c5e50ae561c7eea01da8222522f1ba5596b4f727ab982681d4c0ba5306fca7c38b1d4aa9983454e411fea53cf097e
ssdeep: 384:jEgYv6A+GP/SugBbG/t3hFpJtLgwrPji8pjIPmPWU7tOxM:jCS9cQw3hFp3gwr2gjIfU7MxM
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1A7621B43BB804CA3C79543B524769766D27B7BB00F60BBC36BD4E96C0E792D0E83641A
sha3_384: 7ec1891e61d4df7eeb883ec1478423503bc1fc91d8d83f7d2edfcf3c514e9b91098cd8e5233157c4b380a7b232cec9c4
ep_bytes: e800040000e974feffff558bec6a00ff
timestamp: 2023-05-25 21:13:55

Version Info:
0: [No Data]

Babar.110899 also known as:

Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Babar.110899
Sangfor	Suspicious.Win32.Save.a
Cyren	W32/GameHack.CV.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GenKryptik.GFOC
APEX	Malicious
BitDefender	Gen:Variant.Babar.110899
MicroWorld-eScan	Gen:Variant.Babar.110899
Rising	Trojan.Kryptik!8.8 (TFE:5:SSoP5hx7uUJ)
Emsisoft	Gen:Variant.Babar.110899 (B)
VIPRE	Gen:Variant.Babar.110899
FireEye	Generic.mg.361d068711685696
SentinelOne	Static AI – Suspicious PE
MAX	malware (ai score=86)
Arcabit	Trojan.Babar.D1B133
GData	Gen:Variant.Babar.110899
Google	Detected
VBA32	TScope.Malware-Cryptor.SB
MaxSecure	Trojan.Malware.300983.susgen
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_70% (D)

How to remove Babar.110899?

Babar.110899 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X