Adware

Adware.Cerbu.74750 (B) removal tips

Malware Removal

The Adware.Cerbu.74750 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Adware.Cerbu.74750 (B) virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Adware.Cerbu.74750 (B)?


File Info:

name: 5E40802B9AE892C624A1.mlw
path: /opt/CAPEv2/storage/binaries/cb72a442efe9f7d027f39251333ac902e5911eda131057369b71e29ce8d3dec3
crc32: 1797B84B
md5: 5e40802b9ae892c624a151f51494adb6
sha1: 783843f30f78260e5f4b50aee5f9201ca3eb58a3
sha256: cb72a442efe9f7d027f39251333ac902e5911eda131057369b71e29ce8d3dec3
sha512: 951b23dd1e2e503c4dbd082796d55f063bdd20ca5305f3cb20504ed508ab74d2f4a9f2481e8db5e53f91ba48c0d8e55290b11d6bd7672b40522ec2e1a7f118d0
ssdeep: 98304:qDhDUiHyejAeGiSvOX7Fm2GZXlC7xXL2BlLVk/LDoSJstufm4qtK76LfnIwGcS:MDtS43GJvyFQlC7x7gG4SJssfm4976Lw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DB26338264C7A238D8B48931DC2E3A57771B4ED13D5D6102F51C6D72482BBDDE2ABAC3
sha3_384: 0e18cc2d8a081674363e876baec13c26cedcfe6db7dd5c26b72c6da088b96987f9028e4c247e13c27aad31e04623ad51
ep_bytes: 558bec83c4cc53565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: Et Setup
FileVersion:
LegalCopyright:
Translation: 0x0409 0x04e4

Adware.Cerbu.74750 (B) also known as:

MicroWorld-eScanGen:Variant.Adware.Cerbu.74750
FireEyeGen:Variant.Adware.Cerbu.74750
ALYacGen:Variant.Adware.Cerbu.74750
CylanceUnsafe
K7AntiVirusTrojan ( 005722fe1 )
AlibabaAdWare:Win32/AdLoad.b4017018
K7GWTrojan ( 005722fe1 )
ArcabitTrojan.Adware.Cerbu.D123FE
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/TrojanDropper.Agent.SLC
TrendMicro-HouseCallTROJ_GEN.R011C0WLB21
KasperskyTrojan-Downloader.Win32.Adload.tnxr
BitDefenderGen:Variant.Adware.Cerbu.74750
AvastWin32:TrojanX-gen [Trj]
Ad-AwareGen:Variant.Adware.Cerbu.74750
EmsisoftGen:Variant.Adware.Cerbu.74750 (B)
DrWebTrojan.DownLoader44.12985
TrendMicroTROJ_GEN.R011C0WLB21
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
IkarusTrojan-Dropper.Win32.Agent
JiangminTrojanDownloader.Adload.aiod
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataWin32.Backdoor.Bodelph.HSC4XQ
AhnLab-V3Trojan/Win.Generic.R457707
McAfeeArtemis!5E40802B9AE8
MAXmalware (ai score=69)
MalwarebytesAdware.DownloadAssistant
TencentWin32.Trojan-downloader.Adload.Sxoi
FortinetW32/Agent.SLC!tr
AVGWin32:TrojanX-gen [Trj]
PandaTrj/CI.A

How to remove Adware.Cerbu.74750 (B)?

Adware.Cerbu.74750 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment