How to remove “Babar.25502”?

The Babar.25502 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.25502 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Spanish (Colombia)
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system

How to determine Babar.25502?


File Info:
crc32: 8DF2346A
md5: b10d509bda63d15b7567e63de0584f29
name: B10D509BDA63D15B7567E63DE0584F29.mlw
sha1: ce3563d1bedaeae05b2a4bfe891931c01421dcaa
sha256: 5b244b2edd71b58be336486564e7b1a835346a4b57e2cf4d11f55fb4eda6cc98
sha512: 4a5f2e596e6b9599c0dad161ed1b70fbb980b7f0247220c1d4268162532813edf1d6f7e4c203623d501a156bcd249e54a7fc8c70522b894bf0cd29cbcf7dc237
ssdeep: 12288:8BouzBnZAZFPet5OxBedTzty/o2jLmYCb9yr/F:itZAZFPu5OizQo6pCx8/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
ProductVersus: 1.5.8.28
FileVerus: 1.0.2.27
Translations: 0x0126 0x0226

Babar.25502 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.MedusaReborn.J1
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Babar.25502
Cybereason	malicious.1bedae
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
MicroWorld-eScan	Gen:Variant.Babar.25502
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZexaF.34628.GuW@a8Q3NyV
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
FireEye	Generic.mg.b10d509bda63d15b
Emsisoft	Gen:Variant.Babar.25502 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Acronis	suspicious
McAfee	Packed-GDK!B10D509BDA63
Malwarebytes	Trojan.MalPack.GS
Rising	Malware.Heuristic!ET#92% (RDMK:cmRtazrbHIo8J0UU6+d3IqXKwS/W)
Qihoo-360	HEUR/QVM10.1.FE27.Malware.Gen

How to remove Babar.25502?

Babar.25502 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X