Babar.38626 removal instruction

The Babar.38626 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.38626 virus can do?

Behavioural detection: Executable code extraction – unpacking
Authenticode signature is invalid

How to determine Babar.38626?


File Info:
name: 737851D3F07A2300F7CC.mlw
path: /opt/CAPEv2/storage/binaries/31b50e7b85e8921bc3f2a8a53c0095084b2ce9a85209626599ab08d14dbcb1c8
crc32: 67623A2C
md5: 737851d3f07a2300f7cc2e0ecce5ce59
sha1: c7d2ee54131e8221731d75430de90ca035103208
sha256: 31b50e7b85e8921bc3f2a8a53c0095084b2ce9a85209626599ab08d14dbcb1c8
sha512: 5a74bbb9e247e4ff669f0504b313c507950624390ef7dfe724a3c3b242ccbdee64a6bee6ad090ca6baa9bb284b0821c21eb5263c4ef18e8ca81b44b21ae04457
ssdeep: 1536:/2QS92nmW4/NVnUXU7+87jL2JZtmBlZI752M2OyKTTI61JLw3Ov:OQchiJByKThLw+v
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EAD3D72BEF612145E9B605311D25397A097B9C3150419E4BBA83EE8C0936F93B9F933F
sha3_384: aff953192f717abd00815ce02c9a156b0bbc29ba5f80fead9c65cae6599c1eaf8008da3794f4603214c1908af3328092
ep_bytes: 68a4394000e8f0ffffff000000000000
timestamp: 2017-01-13 03:04:19

Version Info:
Translation: 0x0409 0x04b0
Comments: VaxSIPUserAgent ActiveX sample code for Visual Basic 6.0.
CompanyName: VaxSoft Inc.
ProductName: VaxVoIP SDK
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Project
OriginalFilename: Project.exe

Babar.38626 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Babar.38626
FireEye	Gen:Variant.Babar.38626
Skyhigh	BehavesLike.Win32.Infected.cm
McAfee	Artemis!737851D3F07A
Malwarebytes	Generic.Malware/Suspicious
Arcabit	Trojan.Babar.D96E2
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Babar.38626
Emsisoft	Gen:Variant.Babar.38626 (B)
VIPRE	Gen:Variant.Babar.38626
Trapmine	suspicious.low.ml.score
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win32.Agent
Kingsoft	malware.kb.a.758
GData	Gen:Variant.Babar.38626
ALYac	Gen:Variant.Babar.38626
TrendMicro-HouseCall	TROJ_GEN.R002H09A724
MaxSecure	Trojan.Malware.221362468.susgen
DeepInstinct	MALICIOUS

How to remove Babar.38626?

Babar.38626 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X