Cerbu.116969 removal

The Cerbu.116969 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Cerbu.116969 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Loads a driver
• Dynamic (imported) function loading detected
• A process created a hidden window
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Installs itself for autorun at Windows startup

How to determine Cerbu.116969?

File Info:
name: 0EDDCEACD7C18B642EFF.mlw
path: /opt/CAPEv2/storage/binaries/70d73e31e4385bf73aa534b44f9402e1217d7b893f526943ef04565243c0d889
crc32: F0362F18
md5: 0eddceacd7c18b642eff3b9b5475a6a4
sha1: a8dd3cf6b0f36107111ea65a0ef4666598d3164e
sha256: 70d73e31e4385bf73aa534b44f9402e1217d7b893f526943ef04565243c0d889
sha512: dd31770c36304c189e487d7609cb4ceda34bff65e1c66b2e07799fdc586f37ef3b469f759df47fd41f5e848791293b8fdfc504c2abdc206d2da2f1e197c97220
ssdeep: 6144:q9It8QzE0m5Q1mCVu9gpEsohpAl0hPZEncAOEJb/WyIxAwt5pfYNoNoSGy:qqEO1b8oo0+PZE9O2bJIC0fDNN
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T11DC49E5673A528F9E867813CC8529902F7B2BC260735CBAF1394676A1F336D05D3EB21
sha3_384: 995cb18090700012cfa70bb020cd625ea57983db0a27f2a5ffc0f174c66430a5add1b7317d48fb1e1be98ccc3a61a78c
ep_bytes: 4883ec28e8ff0700004883c428e972fe
timestamp: 2021-11-21 22:17:34

Version Info:
0: [No Data]

Cerbu.116969 also known as:

How to remove Cerbu.116969?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.