Cerbu.110680 removal tips

The Cerbu.110680 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Cerbu.110680 virus can do?

A process attempted to delay the analysis task.
At least one IP Address, Domain, or File Name was found in a crypto call
Performs some HTTP requests
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

cyark.cn

How to determine Cerbu.110680?


File Info:
crc32: 894E5389
md5: 4898ff53bf926a743d74520bb4cddec0
name: 4898FF53BF926A743D74520BB4CDDEC0.mlw
sha1: 624bbcd8d38d2ff053b5161fd6a979411053d13d
sha256: a8c25efe8d2e9528ae33d25e4f24d79b144f52b6fa0fdd19a2647abed6b0e3e3
sha512: c8ae10707690dc8521f1a051d83b6e5a9f99bdf9d9e71ffb67122e3efe1938981f5859a040b459e5c87f375cc8e180b164f1362a9483805b8416d674971338c3
ssdeep: 49152:Dcv4MTsUUC0pyaqP/uJ/rl8w+irA5KoMB4iVve+SYOPVVi:DcwkW9E/uJTN3r2KoMB4ixe+vwVi
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Cerbu.110680 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Cerbu.110680
Cylance	Unsafe
BitDefender	Gen:Variant.Cerbu.110680
Cybereason	malicious.8d38d2
Cyren	W32/Trojan.CLL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Cynet	Malicious (score: 100)
NANO-Antivirus	Virus.Win32.Agent.dvixmz
MicroWorld-eScan	Gen:Variant.Cerbu.110680
Ad-Aware	Gen:Variant.Cerbu.110680
Sophos	Generic ML PUA (PUA)
Comodo	Packed.Win32.MUPX.Gen@24tbus
F-Secure	Heuristic.HEUR/AGEN.1119578
BitDefenderTheta	Gen:NN.ZexaF.34236.uoGfaK9EzadH
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
FireEye	Generic.mg.4898ff53bf926a74
Emsisoft	Gen:Variant.Cerbu.110680 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1119578
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Cerbu.D1B058
GData	Gen:Variant.Cerbu.110680
Acronis	suspicious
McAfee	Flyagent.d
MAX	malware (ai score=80)
VBA32	BScope.Downloader.Snojan
Rising	Malware.Heuristic!ET#92% (RDMK:cmRtazq2mMDQJNqPqMx9U2EfI+mc)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.BELF!tr

How to remove Cerbu.110680?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.