Malware

How to remove “Babar.22281”?

Malware Removal

The Babar.22281 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Babar.22281 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Babar.22281?


File Info:

crc32: 92796476
md5: b95631ac56406c14c5f52f5334e461a4
name: B95631AC56406C14C5F52F5334E461A4.mlw
sha1: 5455579efaaf56aac6b0730a50c9db46ee993f4d
sha256: 3249a728f9f4d7fb4677aa4d4aba0a8fbc476946ecd98301ad3134c6cf1e8774
sha512: c92147607779e6401e8be4b352bca472384b5d2bcdfb18917f9212f87561fd2b3778da591c1334c6625e0f25454b663f3b4b39a635ce66dbb485c47e683ae2b2
ssdeep: 3072:SY6a3t3f2nzPu5CDy8JDzatvzht/gvbYa23JkKdgFHrYBIFUt5tp/qg63:D/EKMzizH4DYa23Jkht2oipk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 1998 Avylezi Unexo. Wybomog Nyxyco Ycimany.
InternalName: Bag
LegalTrademarks: Oxaxu Izufe Oviwet Peru Idu Ihin
FileVersion: 10, 6, 1
FileDescription: Ufi Kohadu Ysuhudy
Translation: 0x0409 0x04b0

Babar.22281 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
ClamAVWin.Trojan.Agent-657378
ALYacGen:Variant.Babar.22281
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
Cybereasonmalicious.c56406
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/PSW.Fareit.A
ZonerTrojan.Win32.15372
APEXMalicious
AvastWin32:Kryptik-LSA [Cryp]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Babar.22281
NANO-AntivirusTrojan.Win32.Tepfer.dzdrwm
MicroWorld-eScanGen:Variant.Babar.22281
TencentWin32.Trojan.Babar.Pfsw
Ad-AwareGen:Variant.Babar.22281
SophosMal/Generic-S
BitDefenderThetaAI:Packer.B6F8D96D1F
VIPRELooksLike.Win32.Zbot.a (v)
TrendMicroTSPY_ZBOT.SMLK
McAfee-GW-EditionBehavesLike.Win32.BadFile.vz
FireEyeGeneric.mg.b95631ac56406c14
EmsisoftGen:Variant.Babar.22281 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.ZPACK.Gen2
Antiy-AVLTrojan/Generic.ASMalwS.546870
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Babar.22281
AhnLab-V3Spyware/Win.Zbot.C4745937
McAfeeArtemis!B95631AC5640
MAXmalware (ai score=82)
VBA32Trojan.Pie.5307
TrendMicro-HouseCallTSPY_ZBOT.SMLK
RisingMalware.Heuristic!ET#93% (RDMK:cmRtazq62EaFRttJWGOyd0kvD0vF)
FortinetW32/Kryptik.AWQ!tr
AVGWin32:Kryptik-LSA [Cryp]

How to remove Babar.22281?

Babar.22281 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment