Malware

Babar.82776 removal

Malware Removal

The Babar.82776 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Babar.82776 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Creates a copy of itself
  • Deletes executed files from disk

How to determine Babar.82776?


File Info:

name: 0F85E934E511810EDD84.mlw
path: /opt/CAPEv2/storage/binaries/141aa77313c6ef980609aca6c57f85886a36ce9d9f1804e6788b71ea177ef76a
crc32: 82C3DB32
md5: 0f85e934e511810edd846affa92adcaf
sha1: 748ff79e525e15af6752e5c67cbf4f027c509f91
sha256: 141aa77313c6ef980609aca6c57f85886a36ce9d9f1804e6788b71ea177ef76a
sha512: 3ba43818c8fa4565f95514c24ebd22fee3e6207809bf390b2fe6bcd44ededc54311a123c50734db5d2c97975610637c3ad390d1b5785b9e0ab83b70549d2d426
ssdeep: 1536:W2gF97lKH3EglawapvcQOy1gkc9vugfEIdN:WTFg3iwuOmoUUT
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1744301651306AF48F447D2BCC1D91149B30AAE372DC69A5B5686252F3FB13E49CF22D3
sha3_384: 66e94d7809e2aaf202d6e10fa548b236a59e689253f26ed7469c42e070739e0a1522be05a31c2db16ac8c271f6cbc2fa
ep_bytes: 68000000005a83ec04893c244e5801c9
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Babar.82776 also known as:

BkavW32.AIDetect.malware2
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Babar.82776
FireEyeGeneric.mg.0f85e934e511810e
McAfeeGenericRXAA-AA!0F85E934E511
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0058c5ff1 )
K7GWTrojan ( 0058c5ff1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZexaF.34606.dmW@a4Nv9o
CyrenW32/Kryptik.EAG.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HITO
CynetMalicious (score: 100)
Kasperskynot-a-virus:HEUR:RiskTool.Win32.Generic
BitDefenderGen:Variant.Babar.82776
APEXMalicious
Ad-AwareGen:Variant.Babar.82776
EmsisoftGen:Variant.Babar.82776 (B)
ComodoPacked.Win32.MUPX.Gen@24tbus
DrWebTrojan.Packed2.43250
VIPREGen:Variant.Babar.82776
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.qc
SophosML/PE-A + Mal/HckPk-A
IkarusTrojan.Win32.Injector
GDataGen:Variant.Babar.82776
AviraTR/Crypt.ULPM.Gen
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R433979
Acronissuspicious
VBA32BScope.Trojan.Wacatac
ALYacGen:Variant.Babar.82776
MAXmalware (ai score=88)
MalwarebytesTrojan.MalPack.UPX
AvastWin32:Evo-gen [Susp]
RisingTrojan.Injector!1.C865 (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.EAHK!tr
AVGWin32:Evo-gen [Susp]
Cybereasonmalicious.e525e1
PandaTrj/Genetic.gen

How to remove Babar.82776?

Babar.82776 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment