Categories: Malware

Babar.24623 removal

The Babar.24623 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.24623 virus can do?

Expresses interest in specific running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Ukrainian
Installs itself for autorun at Windows startup
Creates a hidden or system file
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Babar.24623?


File Info:
crc32: 1F222EA6md5: 0381e3aa7f107054677b2e904be98f08name: 0381E3AA7F107054677B2E904BE98F08.mlwsha1: 1fbed995fbb4547c84f330c7d256cea0579137cesha256: d0571be232325e0c531027aa9ebc7c09719540bc00e651f09eff0bd096849652sha512: f10b2d21c84c25f0756733266f5c7be9a51b8e58b1c05c5461a4043818cd5fd081aa0ba0cf6b700b2d08315f7bd6885c4c76d0d90b680c760001de18589ba562ssdeep: 384:k1j6ok13CUILQ+uA7OERpT7hopwzwZD+TEHe4atGa+VS0sJWN0BPfxkuj:kB/r7hop+oD+SatGtVJYm0TFtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2012InternalName: exeFileVersion: 1, 0, 0, 1ProductName: exeProductVersion: 1, 0, 0, 1FileDescription: exeOriginalFilename: exeTranslation: 0x0419 0x04b0

Babar.24623 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0055e4091 )
Lionic	Trojan.Win32.PornoAsset.j!c
DrWeb	Trojan.Winlock.7443
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Babar.24623
Cylance	Unsafe
Zillya	Trojan.PornoAsset.Win32.14721
CrowdStrike	win/malicious_confidence_70% (D)
K7GW	Trojan ( 0055e4091 )
Cybereason	malicious.a7f107
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/LockScreen.AOU
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Blocker.ljly
BitDefender	Gen:Variant.Babar.24623
NANO-Antivirus	Trojan.Win32.PornoAsset.csatrs
MicroWorld-eScan	Gen:Variant.Babar.24623
Tencent	Win32.Trojan.Pornoasset.Eej
Ad-Aware	Gen:Variant.Babar.24623
Sophos	ML/PE-A
Comodo	Malware@#c39w7yp6kqb6
BitDefenderTheta	AI:Packer.A2C4AE9D1F
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.0381e3aa7f107054
Emsisoft	Gen:Variant.Babar.24623 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1114183
Antiy-AVL	Trojan/Generic.ASMalwS.12C0F5
Kingsoft	Win32.Troj.Undef.(kcloud)
GData	Gen:Variant.Babar.24623
AhnLab-V3	Trojan/Win32.PornoAsset.R81573
McAfee	Artemis!0381E3AA7F10
MAX	malware (ai score=100)
VBA32	BScope.TrojanRansom.Tobfy
Rising	Trojan.Generic@ML.92 (RDML:Ghs1fMTWSt3YGP+YlMci/Q)
Yandex	Trojan.GenAsa!Fw34Y825NfA
Ikarus	Trojan.Win32.Tobfy
MaxSecure	Trojan.Malware.5536140.susgen
Fortinet	W32/PornoAsset.AOU!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml