Categories: Malware

What is “Babar.22761”?

The Babar.22761 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Babar.22761 virus can do?

  • Creates RWX memory
  • Detected script timer window indicative of sleep style evasion
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Serbian
  • A scripting utility was executed
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

www.bing.com
ocsp.digicert.com

How to determine Babar.22761?


File Info:

crc32: B8A7A485md5: 73288246d79658427767178e976e5ba2name: 73288246D79658427767178E976E5BA2.mlwsha1: 52ddf9dff4fc20ee16172eca6a89c59470ded28asha256: ad2522bff14011cb09b9b317986ad79a8648fccac65e7602a17555dd1941d982sha512: f449c116b6301501ea35f9eb767d8bc11a1c595854df71f56224a92fe709d199f7a2a1d0ce1450c51af572a16bbdf04c1773807c2321a65a9e7906e25033418assdeep: 196608:w1C3EsxlfBrLAEcVDy3l/i4dnaxqGaj8v531CM9eStnAb3GLzIRQLADipx95oCUU:wmDnZ93l/i4URF53Hl5fUM9iGtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Babar.22761 also known as:

Bkav W32.AIDetectVM.malware2
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Babar.22761
FireEye Generic.mg.73288246d7965842
McAfee Artemis!73288246D796
Cylance Unsafe
BitDefender Gen:Variant.Babar.22761
Symantec ML.Attribute.HighConfidence
APEX Malicious
Avast Script:SNH-gen [Trj]
Kaspersky HEUR:Trojan.Script.Generic
NANO-Antivirus Trojan.Script.Agent.fkwnyf
Ad-Aware Gen:Variant.Babar.22761
F-Secure Worm:VBS/Njw0rm.B
DrWeb BackDoor.Bladabindi.13678
Invincea Generic ML PUA (PUA)
McAfee-GW-Edition BehavesLike.Win32.BadFile.tc
Emsisoft Gen:Variant.Babar.22761 (B)
Ikarus Trojan.VBS.Crypt
Avira HEUR/AGEN.1106193
Microsoft Trojan:Win32/Wacatac.C!ml
Arcabit Trojan.Babar.D58E9
ZoneAlarm HEUR:Trojan.Script.Generic
GData Gen:Variant.Babar.22761
Cynet Malicious (score: 90)
AhnLab-V3 Trojan/Win32.Agent.R86233
MAX malware (ai score=82)
ESET-NOD32 VBS/TrojanDropper.Agent.NHS
Fortinet VBS/Kryptik.HZ!tr
AVG Script:SNH-gen [Trj]
Cybereason malicious.6d7965
Qihoo-360 HEUR/QVM20.1.38DF.Malware.Gen

How to remove Babar.22761?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Application.Strictor.247842 removal tips

The Application.Strictor.247842 is considered dangerous by lots of security experts. When this infection is active,…

4 mins ago

Malware.AI.3712527239 removal instruction

The Malware.AI.3712527239 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Worm.Win32.VBNA.aitt removal instruction

The Worm.Win32.VBNA.aitt is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Babar.309404 removal

The Babar.309404 is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago

Should I remove “Generic.Dacic.94CCEEA9.A.5646AD3E (B)”?

The Generic.Dacic.94CCEEA9.A.5646AD3E (B) is considered dangerous by lots of security experts. When this infection is…

2 hours ago

About “Trojan:Win32/Lazy.EB!MTB” infection

The Trojan:Win32/Lazy.EB!MTB is considered dangerous by lots of security experts. When this infection is active,…

2 hours ago