Babar.80417 information

The Babar.80417 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.80417 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Babar.80417?


File Info:
name: A69F37FA1A3948243AB7.mlw
path: /opt/CAPEv2/storage/binaries/8e7c6435a75d82fbc8dcf055dda9214a92f22aeb642710357987ae0ed795439a
crc32: C08C2D04
md5: a69f37fa1a3948243ab7446fdea040f9
sha1: bbc2a27e6256034155d4f9cffe12e0c68c82c8f0
sha256: 8e7c6435a75d82fbc8dcf055dda9214a92f22aeb642710357987ae0ed795439a
sha512: aa7f4dfebb6b8ffe5848184aa0d0be61b2a77c2fab665e0302a09f84c8c1d6849fdc36cba0355050f292fde1def3a4c21e3a0792bf5237d45a3e5fd0283da1d3
ssdeep: 3072:vq+OnUOPTAsy2YKBG+rj+rU+dL+dx2+du+dl+d:XOntNy2YLcjcUGLGx2GuGlG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T141C3C6023205E763D58D51305AB08A56CDB69CFE5D3BA10FB3F1E3965FBB208C9E0A15
sha3_384: 5aec3580762c7af096d89dce043e57ac841af795354248958693bdf63b6a6583490698357d918d9c1b6aa7466b3d98a1
ep_bytes: 558bec6aff6850e640006880d6400064
timestamp: 2009-08-20 05:45:08

Version Info:
0: [No Data]

Babar.80417 also known as:

Bkav	W32.AIDetect.malware1
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Babar.80417
FireEye	Generic.mg.a69f37fa1a394824
Cylance	Unsafe
Sangfor	[ARMADILLO V1.71]
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.34786.hOW@a4n5Tgl
Cyren	W32/Coinminer.EP.gen!Eldorado
Symantec	SecurityRisk.Downldr
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HMCY
APEX	Malicious
BitDefender	Gen:Variant.Babar.80417
Avast	Win32:BHO-VA [Trj]
Ad-Aware	Gen:Variant.Babar.80417
Sophos	Mal/Behav-010
Zillya	Adware.Cinmus.Win32.6664
TrendMicro	Mal_DLDER
McAfee-GW-Edition	BehavesLike.Win32.PWSLegMir.cm
Trapmine	malicious.high.ml.score
SentinelOne	Static AI – Malicious PE
Jiangmin	Heur:Adware/Cinmus
Avira	TR/Spy.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.1E
Microsoft	Trojan:Win32/Cerber.MPI!MTB
GData	Gen:Variant.Babar.80417
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Adware-Cinmus.gen.m
MAX	malware (ai score=85)
VBA32	BScope.TrojanPSW.Zbot
Malwarebytes	Trojan.Nymaim.Generic
TrendMicro-HouseCall	Mal_DLDER
Rising	Trojan.DL.Win32.Cinmus.a (CLASSIC)
Ikarus	Trojan.Win32.Cinmus
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.3E08!tr
AVG	Win32:BHO-VA [Trj]
Cybereason	malicious.e62560

How to remove Babar.80417?

Babar.80417 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X