Should I remove “Babar.63653”?

The Babar.63653 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.63653 virus can do?

Behavioural detection: Executable code extraction – unpacking
Authenticode signature is invalid

How to determine Babar.63653?


File Info:
name: D9F70C2036DD33F746FF.mlw
path: /opt/CAPEv2/storage/binaries/bf5452321ece5a0600a97c21c2479367c47da08b2d36df4603246239098f880f
crc32: C07A94D6
md5: d9f70c2036dd33f746ff86e942e5c70e
sha1: aa25f564872a3d53c12e097c6669fe0c37a94a90
sha256: bf5452321ece5a0600a97c21c2479367c47da08b2d36df4603246239098f880f
sha512: 49801e2701eadd1b01e60feb67453f9c4eae3ee8f12225719c678a1e73803cb4322aafeed1b464aab5838ee60d5293b5dc106f0b3f50de3b9191cf5bca07ad31
ssdeep: 192:yL8F5W8rx4QHhhycxvFJ8ZO/4i47DUSvSCx:y/8rx4UF1FGkl47DUSvBx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B9D29723AA5C1460F299C7B20A7D4AF51A237C7019B14FAF389EBD5C1EB4A0179E431F
sha3_384: 097811645dcfcc0e592119d59749531d5c0f32b0e53869d2d8c5d0fad40dd1c1d288d5cc89470b14b3f001bf00f43818
ep_bytes: 68d01b4000e8eeffffff000000000000
timestamp: 2011-11-11 08:30:10

Version Info:
Translation: 0x0409 0x04b0
CompanyName: BurnIn
ProductName: REV
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Rev
OriginalFilename: Rev.exe

Babar.63653 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Babar.4!c
MicroWorld-eScan	Gen:Variant.Babar.63653
FireEye	Gen:Variant.Babar.63653
McAfee	Artemis!D9F70C2036DD
Sangfor	Trojan.Win32.Agent.Vimh
Arcabit	Trojan.Babar.DF8A5
APEX	Malicious
BitDefender	Gen:Variant.Babar.63653
Emsisoft	Gen:Variant.Babar.63653 (B)
VIPRE	Gen:Variant.Babar.63653
McAfee-GW-Edition	BehavesLike.Win32.BadFile.mz
Antiy-AVL	Trojan/Win32.Agent
GData	Gen:Variant.Babar.63653
ALYac	Gen:Variant.Babar.63653
MAX	malware (ai score=84)
TrendMicro-HouseCall	TROJ_GEN.R002H09GL23
MaxSecure	Trojan.Malware.214490454.susgen
Fortinet	Malicious_Behavior.SB
DeepInstinct	MALICIOUS

How to remove Babar.63653?

Babar.63653 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X