How to remove “Babar.32984”?

The Babar.32984 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.32984 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• CAPE detected the embedded win api malware family
• Attempts to modify Explorer settings to prevent hidden files from being displayed
• Yara detections observed in process dumps, payloads or dropped files

How to determine Babar.32984?

File Info:
name: 3DE433B1F3C4A5EED845.mlw
path: /opt/CAPEv2/storage/binaries/862317271626f2e7da506a3d8040b63b2fa3c27f7f3f925497b5e6d5e34f9e4f
crc32: 76C4E89B
md5: 3de433b1f3c4a5eed845bbe0a685189e
sha1: b6a2fc0196f6a692d471dc305a270ee9db576375
sha256: 862317271626f2e7da506a3d8040b63b2fa3c27f7f3f925497b5e6d5e34f9e4f
sha512: cc476e950ee1d0ff627da9fb63b546859a39370f68e920363650a6b64fbe9df62366f417c520f60de97d1b83d4b749f0fda6bbaa77c103854cf8dfc61542e4fa
ssdeep: 1536:vNyg8r8Qtkh4as7Kp3StjEMjmLM3ztDJWZsXy4JzxPM0:mkh4asJJjmLM3zRJWZsXy4Jd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16B33A66ABD4BD40ACC0813F67A53C5D12137745D1A8B2A5EB6EA1FBC6C10E4448BFE63
sha3_384: 526899d8a1f5e1c682df6605e4ba43f3264e0810d6b9a4655ac2d4e3cf27156328f7ae376db28b36543c7bae7ed93c51
ep_bytes: 6840124000e8eeffffff000000000000
timestamp: 2010-02-22 13:17:41

Version Info:
Translation: 0x0409 0x04b0
ProductName: YYetKkJH
FileVersion: 6.73
ProductVersion: 6.73
InternalName: YYetKkJH
OriginalFilename: YYetKkJH.exe

Babar.32984 also known as:

How to remove Babar.32984?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.