What is “Babar.56758”?

The Babar.56758 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.56758 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Babar.56758?


File Info:
name: 74C7033C11916F08D851.mlw
path: /opt/CAPEv2/storage/binaries/db55fb1d9e1f8b2ec516011c6400e4e737293b877fa6f1162150c1ef1fe41dd3
crc32: 5862D760
md5: 74c7033c11916f08d85187b93a7682ea
sha1: a6bea2511f6076158b680a6de726bbf231e2496f
sha256: db55fb1d9e1f8b2ec516011c6400e4e737293b877fa6f1162150c1ef1fe41dd3
sha512: 5b405e13a4654dac57319ab79216c32b855c4177d31ee65f3cf955d31667c797db0e5f37f895eb20a8070552b6963dc99671c560e72e86f85fc6d5a6d5746533
ssdeep: 12288:2ouf1P/nLRVYOvFV15Vo/JLu3m0QsUo6xvtfWMbmLqKl:2otCmhto6xvt7Ktl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T163E4B0876AA48B6ED084C4316F21F6EC06B2D9217D4207577EBC7E9DD73299236033B9
sha3_384: c9e59e85fb8054d63855850bd637bd687a15c32eb8ad10be250a440ff95e36de94e0084e2faf332f05d71209b375ea46
ep_bytes: f9eb0a2a3291832f935c8e027b60f873
timestamp: 2012-06-26 10:19:14

Version Info:
FileVersion: 1.2.0.0
FileDescription: Microsoft 基础类应用程序
ProductName: 天龙八部3助手
ProductVersion: 1.2.0.0
CompanyName: 小路
LegalCopyright: 本程序仅供学习交流，严禁用于商业用途！
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
Translation: 0x0804 0x04b0

Babar.56758 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Babar.56758
FireEye	Generic.mg.74c7033c11916f08
ALYac	Gen:Variant.Babar.56758
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0040f54a1 )
K7GW	Trojan ( 0040f54a1 )
CrowdStrike	win/malicious_confidence_90% (D)
Arcabit	Trojan.Babar.DDDB6
BitDefenderTheta	Gen:NN.ZexaF.36738.Sq0@aCONzAcb
Cyren	W32/S-faa5e637!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
ClamAV	Win.Packed.Zusy-9871860-0
BitDefender	Gen:Variant.Babar.56758
NANO-Antivirus	Virus.Win32.Agent.dvixmz
Rising	Packer.Win32.Agent.f (CLASSIC)
Emsisoft	Gen:Variant.Babar.56758 (B)
VIPRE	Gen:Variant.Babar.56758
McAfee-GW-Edition	BehavesLike.Win32.Flyagent.bc
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.dkxdk
Google	Detected
MAX	malware (ai score=85)
Kingsoft	malware.kb.a.1000
Xcitium	Packed.Win32.Cryptcf.A@4pwi81
Microsoft	Trojan:Win32/Emotet!ml
GData	Gen:Variant.Babar.56758
Cynet	Malicious (score: 100)
McAfee	Flyagent.d
VBA32	BScope.Trojan.Trafog
Cylance	unsafe
Ikarus	Trojan-GameThief.Win32.OnLineGames
Fortinet	W32/CoinMiner.BELF!tr
Cybereason	malicious.11f607
DeepInstinct	MALICIOUS

How to remove Babar.56758?

Babar.56758 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X