Should I remove “Babar.72108”?

The Babar.72108 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.72108 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Babar.72108?


File Info:
name: 810ED333F2B91F34CFF9.mlw
path: /opt/CAPEv2/storage/binaries/e88933bde5351a9a2f81ea6a554b6f818b1272ff8b11ed35cd11069d01546dd1
crc32: A34203C3
md5: 810ed333f2b91f34cff9832d8ba9aaf2
sha1: c1f4d23b9823e65d7fa2f09b9b9368c376f28afb
sha256: e88933bde5351a9a2f81ea6a554b6f818b1272ff8b11ed35cd11069d01546dd1
sha512: c1b79e62eb0789c2773e050b4612c3f8e6bbbcd73e50b5c5b3cd7790df67de36e33787bee51c3f80f95c0d175d66e704262d776400c9618e41919c38ec549c2f
ssdeep: 12288:N+TAoIYyBYDKzcx9jkmP8bey7/0RDMmZZxnyUuyyuW+I/D6lUiUcXz/9:NrtYDKzcx9jkmPe/knxygqZA9
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D4259D2138C99276EEE321BB43EDB62546ADE4F5071506EB37C41BEFD7205C17A32682
sha3_384: e4ad3f354ab292cc39303b2268731508edd760e1bcbe4ccea4589b38c7a7e11f199bc076be84dd7b416cb22b637ec0f6
ep_bytes: e96cd30300e9d63f0500e97b560400e9
timestamp: 2023-09-28 23:38:30

Version Info:
0: [No Data]

Babar.72108 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Babar.72108
FireEye	Gen:Variant.Babar.72108
ALYac	Gen:Variant.Babar.72108
Malwarebytes	Spyware.RedLineStealer
Sangfor	Trojan.Win32.Save.a
Arcabit	Trojan.Babar.D119AC
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HUUC
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan-PSW.Win32.Convagent.gen
BitDefender	Gen:Variant.Babar.72108
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Babar.72108 (B)
DrWeb	Trojan.Inject4.61458
VIPRE	Gen:Variant.Babar.72108
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Win32.Sabsik
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	VHO:Trojan-PSW.Win32.Convagent.gen
GData	Gen:Variant.Babar.72108
Google	Detected
Rising	Trojan.Generic@AI.90 (RDML:euGQJf355+v0hT4iyalw4g)
Fortinet	W32/Injector.ETFD!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Babar.72108?

Babar.72108 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X