Ransom.Babuk.86 (B) malicious file

The Ransom.Babuk.86 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom.Babuk.86 (B) virus can do?

• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Deletes executed files from disk
• Anomalous binary characteristics

How to determine Ransom.Babuk.86 (B)?

File Info:
name: D22A9AF32E76F5A5E83B.mlw
path: /opt/CAPEv2/storage/binaries/5c9b1d3a30a11c47204b2549fb1afa6a90ec34e7aa91940c300003f69f5ec285
crc32: D7EC0A4A
md5: d22a9af32e76f5a5e83bfc4a83d7a2aa
sha1: 3687afa96945d9fddc2c111a6a788fa78f57d039
sha256: 5c9b1d3a30a11c47204b2549fb1afa6a90ec34e7aa91940c300003f69f5ec285
sha512: 6ebb0b752bc76dd31886071202d1ae5cd1a68493df70eaca1606a9c399177b2956ba54da0943aea8797ad0b02f815be63e87994d937444a030e40443bf393693
ssdeep: 6144:xfNF3QF5B58ePhhdnd6F3xemdqkEjiPISUOgW9X+hOGzC/NM:xLQFHCeZhdnqukmZzcukG2/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T196A48D98F9589B63E263013D69DAF590A376BC60E375C25B7024F32D12F3B5014BAB6C
sha3_384: 08ae87dab3cc4c3a2d0d73ee9dff6a06944ca143724e166d13e505f3bfb53aa5c56104272d54e37636a9c04aafebaba1
ep_bytes: 60be000000008abe00104000c0cf9f80
timestamp: 2007-06-02 06:27:43

Version Info:
CompanyName: TODO: 
FileDescription: TODO: 
FileVersion: 1.0.0.1
InternalName: AdwTest.exe
LegalCopyright: TODO: (c) .  All rights reserved.
OriginalFilename: AdwTest.exe
ProductName: TODO: 
ProductVersion: 1.0.0.1
Translation: 0x0409 0x04e4

Ransom.Babuk.86 (B) also known as:

How to remove Ransom.Babuk.86 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.