Babar.38882 (B) information

The Babar.38882 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.38882 (B) virus can do?

Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Babar.38882 (B)?


File Info:
name: 5C2AF62EB5BBF0C75D46.mlw
path: /opt/CAPEv2/storage/binaries/81f2aa47e06af5159d12c86d1e28dcc82d8d1921bfc3a74a88e2b3e4b1e1674d
crc32: 2FF2EEE2
md5: 5c2af62eb5bbf0c75d4643d452e7cbb7
sha1: f064dc75405250e70b5a09a889b382b3880db3a1
sha256: 81f2aa47e06af5159d12c86d1e28dcc82d8d1921bfc3a74a88e2b3e4b1e1674d
sha512: a61c22fecf5c9fe92b889d63e8a2a2befbef100d58f073ae7faa333cc656957c7646375f54c9d1eace3b2e98ae267a90c9a38f3ade5cd6515288adb4c5eb6a51
ssdeep: 98304:Y2BtLK3BDhtvS0Hpe4zbpaAKQkroGIggxC9Y5lpuG81:OBnvjeApaAvktTQIG81
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18B76CF52B3F000A1E1A28370C969973AEB71BD5E173097CF6690475A2F227F2DE39716
sha3_384: 2b48fde5e524b78f0e7a4592c9a1fb6ab975a2f1b623fcad32f2d9fd5f4936715daaeebfc29b362bb6a8f67da1d16550
ep_bytes: 0fc1ca21e8e8000000005a0fbfcaeb01
timestamp: 2033-07-16 10:41:46

Version Info:
0: [No Data]

Babar.38882 (B) also known as:

Bkav	W32.AIDetect.malware1
tehtris	Generic.Malware
ClamAV	Win.Malware.Bulz-9859378-0
FireEye	Generic.mg.5c2af62eb5bbf0c7
McAfee	GenericRXFR-AR!5C2AF62EB5BB
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.540525
Cyren	W32/Agent.EF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/RiskWare.PEMalform.F
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Babar.38882
NANO-Antivirus	Trojan.Win32.Crypted.cxsujh
MicroWorld-eScan	Gen:Variant.Babar.38882
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Babar.38882
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/Patched.Ren.Gen
TrendMicro	TROJ_GEN.R03BC0PDM22
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.vc
Emsisoft	Gen:Variant.Babar.38882 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Babar.38882
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.3568490
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34606.@hZ@aiRFpml
ALYac	Gen:Variant.Babar.38882
MAX	malware (ai score=84)
VBA32	Worm.VB
TrendMicro-HouseCall	TROJ_GEN.R03BC0PDM22
Rising	Hacktool.PEMalform!8.13289 (RDMK:cmRtazp5NRosOY5zWIX46WwPJcLg)
Ikarus	Trojan.Win32.Genome
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	Riskware/PEMalform
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Babar.38882 (B)?

Babar.38882 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X