Malware

Babar.27725 removal guide

Malware Removal

The Babar.27725 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Babar.27725 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Serbian
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Babar.27725?


File Info:

crc32: F30C233D
md5: fd065aef138a3b260095416cb22bf8e4
name: FD065AEF138A3B260095416CB22BF8E4.mlw
sha1: 2758d68101bc85168c57f23637e0bfb9c5e9fffd
sha256: 92a1dbf2422d1c7181a60f169396d3358e5054bc564e7df204d276f7337cc707
sha512: 8bdd948f687866e1f0e0bf282ae68cef6fa7ccf6a7ce06f5e233569b480cc2e436fadf575a7279a2f5a2e5b86b1876ce00fc13e6c8d8b71b93d713dfe49b69e3
ssdeep: 6144:55UDJjUXGU6OwtDgUr5LLH+z0FutkRwoOL:3Ud8vUr5LL+/MwoO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: kogzmuahoke.exi
ProductVersion: 91.78.38.10
Copyright: Copyrighz (C) 2020, vodkaguts
Translation: 0x0482 0x011f

Babar.27725 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusRiskware ( 0049f6ae1 )
Elasticmalicious (high confidence)
McAfeeArtemis!FD065AEF138A
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderGen:Variant.Babar.27725
K7GWRiskware ( 0049f6ae1 )
SymantecML.Attribute.HighConfidence
APEXMalicious
CynetMalicious (score: 100)
MicroWorld-eScanGen:Variant.Babar.27725
Ad-AwareGen:Variant.Babar.27725
SophosML/PE-A
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.dc
FireEyeGeneric.mg.fd065aef138a3b26
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_75%
MicrosoftTrojan:Win32/Wacatac.B!ml
Acronissuspicious
VBA32BScope.Trojan.Azorult
MAXmalware (ai score=89)
RisingTrojan.Kryptik!1.D82C (CLASSIC)
IkarusTrojan-Spy.MSIL.Agent
FortinetW32/GenKryptik.ERHN!tr
Paloaltogeneric.ml
Qihoo-360HEUR/QVM10.1.02EB.Malware.Gen

How to remove Babar.27725?

Babar.27725 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment