Should I remove “Adware.Cerbu.74725”?

The Adware.Cerbu.74725 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Cerbu.74725 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Enumerates running processes
• Expresses interest in specific running processes
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Likely virus infection of existing system binary

How to determine Adware.Cerbu.74725?

File Info:
name: C168FC21552F11FC3BCE.mlw
path: /opt/CAPEv2/storage/binaries/53be75b93bcca9137e1411b9f36bae4b545d44c524a038fcaf4f8cb0a04cdd68
crc32: E63F2401
md5: c168fc21552f11fc3bceee10f8071051
sha1: 98eb9a4edda7f25e21310ba38a79abce6b5c9066
sha256: 53be75b93bcca9137e1411b9f36bae4b545d44c524a038fcaf4f8cb0a04cdd68
sha512: 030b2118c2fa5ab6a02f38e782382878534f826b187e4e6c8bc1f658fab483575a8bd26382e6bb43294080b804528aeb457c0d047e50e95d134d7f7a75b09b98
ssdeep: 49152:TcsQ6QsXNg69M8iUDkNv4RMFaxPYmYkNhn2XKS3OuudQZC4k0Y4QGIPLONkPGB:T1QTsXNLyIDkxF8okL26aCZD9z4UO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13ED50127B298A53EC49A27354573A01068FFB66DF417BE1637F0C88CCF664C11E3AA65
sha3_384: abfd33337381368017071cbaef31fcdeab23e6fa3ee792d631431f72fafc86a28d458204b5e2940bc1bd7f47194122dd
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2021-07-22 05:43:38

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: Cat Logic                                                   
FileDescription: CatList Setup                                               
FileVersion:                     
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: CatList                                                     
ProductVersion: 0.8.0.5                                           
Translation: 0x0000 0x04b0

Adware.Cerbu.74725 also known as:

How to remove Adware.Cerbu.74725?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.