Cerbu.121864 removal instruction

The Cerbu.121864 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.121864 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Cerbu.121864?


File Info:
name: A7B13DB9156143DB21F3.mlw
path: /opt/CAPEv2/storage/binaries/96eda0aeaf958010be722ccc1a8f7abb89efd701b43d3bcb70a4cdcd49ef0b49
crc32: B496671C
md5: a7b13db9156143db21f3e90100439bda
sha1: daa08d719f40ae93bd0c5e15f0b9882db1d7870b
sha256: 96eda0aeaf958010be722ccc1a8f7abb89efd701b43d3bcb70a4cdcd49ef0b49
sha512: 423faa2a8255fb0248db9bb07fd9304ffeaf3187f400f90909b0a1fab3559eab0086f843744fc67c5be62c617e4eb30a3ce84b53f4cd9cbcddf9cf6a7b07de3f
ssdeep: 98304:occ2d3JdXN0B7+s9V2V2jxAZAsRXUc9IW1dXgfC/MHmgVqnstLE7:ofFV2VTqqnh7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F856E78166E64037DC6DAD3049505238F4217E9FBE2EBA4BFD40B95DAB7F5D06828332
sha3_384: 5a6e57667604e14713169347dff8a2763b8bd89573bc116a4517e877669f9938dd4a3925fc1eaf462dfb6d614c5db765
ep_bytes: 656374696f6e4c697374656e65720045
timestamp: 2018-01-15 16:10:52

Version Info:
0: [No Data]

Cerbu.121864 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Malicious.4!c
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Cerbu.121864
Cylance	Unsafe
Sangfor	Trojan.Win32.Sabsik.FL
Cyren	W32/Agent.CPF.gen!Eldorado
Symantec	Trojan.Gen.MBT
APEX	Malicious
ClamAV	Win.Malware.Bulz-9859378-0
Avast	Win32:Malware-gen
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Generic.tm
FireEye	Generic.mg.a7b13db9156143db
Ikarus	Virus.Win32.Blackie
Jiangmin	Trojan.Generic.hbivx
Antiy-AVL	Trojan/Generic.ASMalwS.330066B
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Script/Phonzy.C!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.R469974
McAfee	GenericRXAA-AA!A7B13DB91561
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.2D50!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Cerbu.121864?

Cerbu.121864 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X