About "Trojan.Babar" infection

The Trojan.Babar is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Babar virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Babar?


File Info:
crc32: 2F335665
md5: db5198ea4d04bad9c91dc04ba2033579
name: DB5198EA4D04BAD9C91DC04BA2033579.mlw
sha1: cd5a840885c8d5fb2ca02bd502fe22201f53437d
sha256: 1998849026d2d7f4c307bef0a8f2de606d8d4c5966d8963a2592d107be4dc15e
sha512: 8350da3363bf419cf0a2886b3db547703b7d4efb1d79db5106959d3e1a750de96c551a6fd8c68af36607b9b19058b3082fb94b5d778295fcf90d1979b56ca455
ssdeep: 98304:m6h30YoT1QMYT17A8iwHbv33nnRNW3qn9wWZGPDxx+L9Vu:mkkx/Ubv3XnR069RcFxC9Vu
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: CShield
FileVersion: 1.0.6
ProductName: CShield by .colossus.
ProductVersion: 1.0.6
FileDescription: CShield by .colossus.
OriginalFilename: CShield.dll
Translation: 0x0409 0x04b0

Trojan.Babar also known as:

Bkav	W32.AIDetect.malware2
CAT-QuickHeal	Trojan.Babar
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
K7GW	Trojan ( 7000001c1 )
K7AntiVirus	Trojan ( 7000001c1 )
APEX	Malicious
Cynet	Malicious (score: 100)
Sophos	ML/PE-A + Mal/VMProtBad-A
FireEye	Generic.mg.db5198ea4d04bad9
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Malware.Gen
Gridinsoft	Trojan.Heur!.02296020
AegisLab	Trojan.Win32.Generic.4!c
McAfee	Artemis!DB5198EA4D04
Rising	Trojan.Crypto!8.364 (CLOUD)
Fortinet	W32/VMProtBad.A
Paloalto	generic.ml

How to remove Trojan.Babar?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan.Babar” infection