Should I remove “Babar.18581”?

The Babar.18581 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.18581 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

How to determine Babar.18581?


File Info:
crc32: 85E56131
md5: 10dfeb4ebfc2ac04074e7d2d5064758a
name: 10DFEB4EBFC2AC04074E7D2D5064758A.mlw
sha1: 4f41af27590a4754d880f9cb65a2574e2980fad7
sha256: dd80160e9b8b67414c5dc4e0339106f0cc812c1b551e5511769e8d1ac5acaa78
sha512: 32f483dc2b5ebf7df33e441ca0706ce5b05eee7dcce80ea22cc4baa9e88192e582e5df07fa3f5c973e6c8dc32945e307daa73c43ec2a647f7fcfc60dc874197e
ssdeep: 1536:d/VLwsoniUXSeg/372kOmgTE/IlIBptVbE364sQRCf9qWHhscLOdxBQKvt3B:d/VLwNniFegiU/RVo3Zsv9Hxgjdvtx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
CompanyName: x4e91x5916x5f52x9e1fx5de5x4f5cx5ba4
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
Translation: 0x0804 0x0000

Babar.18581 also known as:

Bkav	W32.AIDetect.malware2
ALYac	Gen:Variant.Babar.18581
Cylance	Unsafe
Sangfor	Trojan.Win32.Sabsik.FT
CrowdStrike	win/malicious_confidence_60% (W)
Cybereason	malicious.ebfc2a
Cyren	W32/Trojan.GWMR-7002
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Babar.18581
MicroWorld-eScan	Gen:Variant.Babar.18581
Ad-Aware	Gen:Variant.Babar.18581
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34690.jq0@aC4a9Hmb
McAfee-GW-Edition	GenericRXKO-QW!10DFEB4EBFC2
FireEye	Generic.mg.10dfeb4ebfc2ac04
Emsisoft	Gen:Variant.Babar.18581 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Wacatac.A!ml
AegisLab	Riskware.Win32.Babar.1!c
GData	Gen:Variant.Babar.18581
AhnLab-V3	Malware/Gen.Generic.C3254677
McAfee	GenericRXKO-QW!10DFEB4EBFC2
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Dynamer
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R005H0CEI21
Rising	Malware.Heuristic!ET#92% (RDMK:cmRtazq0x/ChgjA0W+JNuiQza+nv)
Ikarus	AdWare.Win32.BlackMoon
Fortinet	Riskware/Application
AVG	Win32:Malware-gen

How to remove Babar.18581?

Babar.18581 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X