How to remove “Babar.193215”?

The Babar.193215 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.193215 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Attempts to modify proxy settings

How to determine Babar.193215?

File Info:
name: DC8B1FD76075CC28BD47.mlw
path: /opt/CAPEv2/storage/binaries/640d1fd31e27ae4faebba619a2dc4ef026d0905c7f0619890bfedff0f3612cdf
crc32: A2F73159
md5: dc8b1fd76075cc28bd47300c8a7aff28
sha1: 4a29474ffa0ab42f5708965937b83350cc3fc930
sha256: 640d1fd31e27ae4faebba619a2dc4ef026d0905c7f0619890bfedff0f3612cdf
sha512: 6385281d5b1fb45dbefafa4ebbc4b5d2c7d1ed9c4b4291647aa91e9dff27333feb8a4d449dab4d2fd10f2f4fbd8efa1c347ca8521ffc85b6b353fad46b23d0a8
ssdeep: 24576:YMjhDtoHh7azUPw3wCzdpc//viFaa1mlBwbfgzEsXO9jeHSd1JLBF5nFSEq7HOZl:r0iVzdpG/oakgsG+jeyd1VRFOa
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11D552313F3C349B1F659417DC861C594AD2B78B928E230357DF8DA1F46B81C29CBADA2
sha3_384: 0d117ea7d91321fdedc03a2407881e2bf5933b300d39757ddb94b73cadbb0a2c6b7cbcb5491a145dba9fd5a22c85e805
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2012-05-29 11:51:48

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: Photo Viewer For Win 10                                     
FileDescription: Photo Viewer For Win 10 and 11 Setup                        
FileVersion: 2.1                 
LegalCopyright: Copyright (c) 2019 photoviewerforwin10.com                                                          
ProductName: Photo Viewer For Win 10 and 11                              
ProductVersion: 2.1                 
Translation: 0x0000 0x04b0

Babar.193215 also known as:

How to remove Babar.193215?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.