Should I remove “Cerbu.119898”?

The Cerbu.119898 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.119898 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Cerbu.119898?


File Info:
name: 8B9092DBD63BC974E251.mlw
path: /opt/CAPEv2/storage/binaries/a517549b3aaaddcff53c403d94e4c5d8f8046e3225bd7b6c8c67d0585255af6e
crc32: 963CE68F
md5: 8b9092dbd63bc974e251bef3fe77ab27
sha1: d6ee28cdf19925772f6f45ed42171aeda5347508
sha256: a517549b3aaaddcff53c403d94e4c5d8f8046e3225bd7b6c8c67d0585255af6e
sha512: 7461b6c8441e2d0985595d967bc663296ab3098db6b995eb46e9b2c064e02558b294f3b2617abb7070726b2c046b93499904f0b63d810f3a554a8fa8eefb5d0b
ssdeep: 384:TGFmO0BWg3FixcPDOHDiuXGDpbIdicEtEg:TGFmfZUcLCDiJpbIQlR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15E523A226BD0C0B1C262347164587AF79B3D883523357CDB2F981A707F61AE0D96A36B
sha3_384: 82c338160f5dcce502f091bf8be41d1d47bab54b05c052773b71ab207a540f066e66a6e631463c202ffdba1ac301bd59
ep_bytes: e850440000e979feffffcccccccccccc
timestamp: 2021-03-14 21:48:53

Version Info:
0: [No Data]

Cerbu.119898 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Variant.Cerbu.119898
FireEye	Generic.mg.8b9092dbd63bc974
McAfee	Lockbit-FSWW!8B9092DBD63B
BitDefender	Gen:Variant.Cerbu.119898
Ad-Aware	Gen:Variant.Cerbu.119898
Sophos	ML/PE-A
McAfee-GW-Edition	Lockbit-FSWW!8B9092DBD63B
Emsisoft	Gen:Variant.Cerbu.119898 (B)
Ikarus	Trojan-Ransom.StopCrypt
GData	Gen:Variant.Cerbu.119898
APEX	Malicious
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Cerbu.119898
MAX	malware (ai score=81)
Rising	Trojan.Generic@ML.84 (RDML:X0uqmNlMI6Z6blpYqIF3Ug)
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Cerbu.119898?

Cerbu.119898 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X