About “Babar.83927” infection

The Babar.83927 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Babar.83927 virus can do?

Authenticode signature is invalid

How to determine Babar.83927?


File Info:
name: B38082481FF736730884.mlw
path: /opt/CAPEv2/storage/binaries/f4da8c0468724634e282a07791bdb73541e9903ea162a6fa6eb6ae273a4bb672
crc32: E67CB1E1
md5: b38082481ff7367308845bd2c2f4066e
sha1: 9c634897f1d05d3304617d67e97af56329482e4e
sha256: f4da8c0468724634e282a07791bdb73541e9903ea162a6fa6eb6ae273a4bb672
sha512: 15b0804af9adfbd87e76ae1b09f35b6599f0825f971d68df9673064ce8c43867c4f47984479d845c30488ebf4f9874f3a6979337d92ab554fd83d7b5f2e51da8
ssdeep: 6144:yjCs6rk/dalcslk5EpFRmAOnH4qThPiKC:yjqk/dalnmOciKC
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T19B34AF01B4D1C432D872153326F4EBB65A3EB9600B955AEFA7D41F7E8F202C1E631A67
sha3_384: 54586c0aac594fb1b82f8e2851fd9b3b9d5fe7e4d5e358178fb0a9dab298f37bb747693b294de778cdbd69c6e23008fd
ep_bytes: e8f2070000e974feffff558bec8b4508
timestamp: 2023-09-27 11:09:36

Version Info:
0: [No Data]

Babar.83927 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Babar.83927
ALYac	Gen:Variant.Babar.83927
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Backdoor.Win32.Mokes.gen
BitDefender	Gen:Variant.Babar.83927
Emsisoft	Gen:Variant.Babar.83927 (B)
VIPRE	Gen:Variant.Babar.83927
TrendMicro	TrojanSpy.Win32.TRICKBOT.SMC
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.b38082481ff73673
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Babar.83927
MAX	malware (ai score=86)
Arcabit	Trojan.Babar.D147D7
ZoneAlarm	VHO:Backdoor.Win32.Mokes.gen
Microsoft	Trojan:Win32/SmokeLoader.RB!MTB
Google	Detected
TrendMicro-HouseCall	TrojanSpy.Win32.TRICKBOT.SMC
Rising	Trojan.SmokeLoader!1.EB4F (CLASSIC)
Ikarus	Trojan.Win32.Injector
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZexaF.36722.oqW@aa@AFHl
Cybereason	malicious.7f1d05
DeepInstinct	MALICIOUS

How to remove Babar.83927?

Babar.83927 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X