Categories: Malware

Cerbu.116952 removal tips

The Cerbu.116952 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Cerbu.116952 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Cerbu.116952?


File Info:
name: D8E8524AB1429A184001.mlwpath: /opt/CAPEv2/storage/binaries/d14249a7f56a276d4e6b8d90a7a67ac237f91b94df2dbd9cbf3c7fc1116450c6crc32: DA36B4ADmd5: d8e8524ab1429a1840019076b89c9289sha1: 606dbea48939d51aef1f42571a8ab3695a77b814sha256: d14249a7f56a276d4e6b8d90a7a67ac237f91b94df2dbd9cbf3c7fc1116450c6sha512: 97e07f5394e778c51f9dfc2f2151e097311ebfc19e39469c229503dbceaebd9e578105599b3a54bb35b353110edd452803353f82900c1fc83fd7e6c6573dd8dassdeep: 192:1d4daMUPYYmkuZmlZhFsRQieHGFGj8SYzI:dYHku+FsRsI6cztype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11C121A5067E48B72C6D74A3218F362200772D745E89EDB1E6CCC604F1E23B860BA3B79sha3_384: f6e8473d28b68fbd9718782750fa8bfa8fd7188248f84dd55298efb89c303f341c267e4e07ba83ea0f837eaa3a1abe05ep_bytes: ff250020400000000000000000000000timestamp: 2087-08-02 01:50:40
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: BTC ClipperFileVersion: 1.0.0.0InternalName: BTC Clipper.exeLegalCopyright: Copyright ©  2020LegalTrademarks: OriginalFilename: BTC Clipper.exeProductName: BTC ClipperProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

Cerbu.116952 also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.MSIL.ClipBanker.7!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
McAfee	RDN/PWS-Banker
Cylance	Unsafe
Zillya	Trojan.ClipBanker.Win32.8087
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0056cc4e1 )
BitDefender	Gen:Variant.Cerbu.116952
K7GW	Trojan ( 0056cc4e1 )
Cybereason	malicious.ab1429
Arcabit	Trojan.Cerbu.D1C8D8
Cyren	W32/MSIL_Troj.AGP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/ClipBanker.RC
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
Alibaba	TrojanBanker:MSIL/ClipBanker.ccd1762b
MicroWorld-eScan	Gen:Variant.Cerbu.116952
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:HK7Nyjs21kOdnPdZsOq84Q)
Ad-Aware	Gen:Variant.Cerbu.116952
Emsisoft	Gen:Variant.Cerbu.116952 (B)
DrWeb	Trojan.ClipBankerNET.7
VIPRE	Gen:Variant.Cerbu.116952
TrendMicro	TrojanSpy.MSIL.CLIPBANKER.SM
McAfee-GW-Edition	RDN/PWS-Banker
FireEye	Generic.mg.d8e8524ab1429a18
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.MSIL.ClipBanker
Jiangmin	Trojan.Banker.MSIL.gag
Avira	HEUR/AGEN.1217213
Antiy-AVL	Trojan/Generic.ASMalwS.55C6
Microsoft	Trojan:MSIL/ClipBanker.GD!MTB
GData	MSIL.Trojan-Stealer.ClipBanker.I
AhnLab-V3	Malware/Win32.RL_Trojanspy.C4222445
Acronis	suspicious
ALYac	Gen:Variant.Cerbu.116952
MAX	malware (ai score=82)
Malwarebytes	Trojan.Clipper
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TrojanSpy.MSIL.CLIPBANKER.SM
Tencent	Msil.Trojan-banker.Clipbanker.Wuqy
Yandex	Trojan.ClipBanker!eSAk5uN9tYY
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/ClipBanker.RC!tr
BitDefenderTheta	Gen:NN.ZemsilF.34806.am0@auo!wzh
AVG	Win32:BankerX-gen [Trj]
Avast	Win32:BankerX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)