Should I remove “Cerbu.115549 (B)”?

The Cerbu.115549 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.115549 (B) virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Cerbu.115549 (B)?


File Info:
crc32: 42231E0B
md5: 23210f6288a84d11aa8e1a375434b187
name: 23210F6288A84D11AA8E1A375434B187.mlw
sha1: 389b724fa7b37cb09473eee817766636fc36b775
sha256: 01eea95ec5a20df61682c84243f682e76e97ffc8f03d858cb1258abaa717c2e1
sha512: 2904c8fe33475d6ec0f40bf4257eb806a39b6198a818d22e287843f121c5916247e0297f8ddd85b7f6b2a77e3cb3027f34a8c8bc17f29ec383a2bbf01e503778
ssdeep: 24576:gbiL1D5mSrHQy5Sk2OaewsAjbw/rxRTk59FF96X0JxQu54GX:gE1d/92RljsPT2zH
type: PE32+ executable (GUI) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright Microsoft Corporation. All rights reserved.
InternalName: cookie_exporter_exe
CompanyShortName: Microsoft
FileVersion: 92.0.902.62
CompanyName: Microsoft Corporation
ProductShortName: Microsoft Edge
ProductName: Microsoft Edge
LastChange: e0b431c35804391fdedd209e4e727584e80a3fd0
ProductVersion: 92.0.902.62
FileDescription: Microsoft Edge
OriginalFilename: cookie_exporter.exe
Official Build: 1
Translation: 0x0409 0x04b0

Cerbu.115549 (B) also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Ransomware.WannaCry-9856297-0
ALYac	Gen:Variant.Cerbu.115549
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Cerbu.115549
Cyren	W64/Bulz.BT.gen!Eldorado
Cynet	Malicious (score: 100)
MicroWorld-eScan	Gen:Variant.Cerbu.115549
Ad-Aware	Gen:Variant.Cerbu.115549
McAfee-GW-Edition	BehavesLike.Win64.Emotet.th
FireEye	Generic.mg.23210f6288a84d11
Emsisoft	Gen:Variant.Cerbu.115549 (B)
SentinelOne	Static AI – Suspicious PE
Antiy-AVL	Trojan/Generic.ASMalwS.349521C
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Cerbu.115549
McAfee	Artemis!23210F6288A8
MAX	malware (ai score=88)
Ikarus	Trojan.Win32
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Autoruner.547!tr

How to remove Cerbu.115549 (B)?

Cerbu.115549 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X