Should I remove “Cerbu.101006”?

The Cerbu.101006 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.101006 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Cerbu.101006?


File Info:
name: 89BF6ABFABC4737116AE.mlw
path: /opt/CAPEv2/storage/binaries/e0d75df8b00164b48852fcfb7f7c72b8d09e7017a9cd413b54ab58bc13cebe1e
crc32: 74C6966B
md5: 89bf6abfabc4737116ae0a0e952dc856
sha1: a7d65f897ad1e78d12ccf17f92e6f7082829c95e
sha256: e0d75df8b00164b48852fcfb7f7c72b8d09e7017a9cd413b54ab58bc13cebe1e
sha512: 6098a55975db04f255c01e06be8fc15d2c501287483aa06f5c81809285b2e1d5895e72c092c5e9feef2abdf9319540bae7ccef42ecd3cdcf97852380a336257b
ssdeep: 1536:n7nF7dIP0y4VnReLMSqtsSFpq05fglcOoDyrQNdsvH3J9/1HnMQVbBN8I:7Bi0gWA0KlyOMsH5N/bBND
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14E7302DC7BF1994ECE4409F0CA28E2E4CE0E2DB1E08B6859C66A776C9DB57044ED5473
sha3_384: d326ce8f7d2f6344c85e80efc986c66d23e188ccffac83878ea511239e4de6fd4a1c11fae3f1112b216c0ef44df6ca37
ep_bytes: be0000000083ec04891c2409cf01f981
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Cerbu.101006 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.89bf6abfabc47371
McAfee	Glupteba-FUBP!89BF6ABFABC4
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 005435201 )
K7AntiVirus	Trojan ( 0058c5ff1 )
Cyren	W32/Kryptik.ECM.gen!Eldorado
APEX	Malicious
BitDefender	Gen:Variant.Cerbu.101006
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Gen:Variant.Cerbu.101006
Sophos	ML/PE-A + Troj/Agent-BGOS
TrendMicro	TROJ_GEN.R03BC0PB422
McAfee-GW-Edition	BehavesLike.Win32.RAHack.lc
Emsisoft	Gen:Variant.Cerbu.101006 (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Generic.ASMalwS.3513AF9
Microsoft	Trojan:Win32/Sabsik!ml
GData	Gen:Variant.Cerbu.101006
ALYac	Gen:Variant.Cerbu.101006
TrendMicro-HouseCall	TROJ_GEN.R03BC0PB422
Rising	Malware.Heuristic!ET#90% (RDMK:cmRtazqyaLO3k4WcHV4YGe5KRM7m)
Ikarus	Trojan.Win32.Injector
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Kryptik.ECM!tr
Cybereason	malicious.97ad1e

How to remove Cerbu.101006?

Cerbu.101006 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X