Babar.424158 malicious file

The Babar.424158 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.424158 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the embedded win api malware family
• Touches a file containing cookies, possibly for information gathering
• Anomalous binary characteristics
• Yara detections observed in process dumps, payloads or dropped files

How to determine Babar.424158?

File Info:
name: AE130016D186A42FADE8.mlw
path: /opt/CAPEv2/storage/binaries/95ee43abe9c567a839102c0157ca8050bd59677b721df441ea78a9d98f1ece7c
crc32: D251B0F4
md5: ae130016d186a42fade8fe6ab96dc8f5
sha1: 0816d55e2edff5270017183ae1daee6fdaf3d3e7
sha256: 95ee43abe9c567a839102c0157ca8050bd59677b721df441ea78a9d98f1ece7c
sha512: 5943631d907db8067847c821700f1a4934a844cb998ef899d9e193962a7e3154e33c284f6fd81776e9e5a99b1bf0fe9860cc98d1ec8f6e1b289649e9bdaf65bf
ssdeep: 98304:vzf1iw2ZWSqWe+Mi/ka34WdZU3MCD3zY6QbHE6YCELtZNwZGnxf14HXq1Ry:DUX0+9134wZ7SDY62DYhLoHB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1917633E352890906E42179F792AB9AE24386DDEDD143277711F1B22F8E7DD03ED4242E
sha3_384: 998597d3fe0e4170dc9c6877d2bd7d4ed564fffb0a2890d06f8d5f75ff1999263dc0ab35250d220fd19535728a263b53
ep_bytes: 680140b001e801000000c3c3bf2adaa9
timestamp: 2015-12-14 18:01:38

Version Info:
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
Translation: 0x0409 0x04e4

Babar.424158 also known as:

How to remove Babar.424158?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.