Categories: Malware

Cerbu.122888 removal instruction

The Cerbu.122888 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Cerbu.122888 virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Behavioural detection: Injection (Process Hollowing)
Behavioural detection: Injection (inter-process)

How to determine Cerbu.122888?


File Info:
name: BAF8953BB76AAF454A96.mlwpath: /opt/CAPEv2/storage/binaries/3f42163b629f4cba61718e1307df6c0ae670771edc4de5044c576f25e4f6ca58crc32: 7B9DF493md5: baf8953bb76aaf454a9648f13f9408e8sha1: 05f9b54468be632a8fce00281016eab5d66a1db4sha256: 3f42163b629f4cba61718e1307df6c0ae670771edc4de5044c576f25e4f6ca58sha512: 2eb74fc6c5de9f258d584b91a2358f2a8552cdb2cea496a34aeb7e81886aef8b9e49ed0756a2192a5f2da36cb58d0d3adf78350ecdbe23a62a8f6968146318fbssdeep: 49152:WZgvkokzV1pZgvkokzV1Fcr9fNN0ZgvkokzV1pZgvkokzV1Fcr9fNNl:WZsk7V3Zsk7VcrREZsk7V3Zsk7VcrR1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T116F5D02AF6D0C437D1736E38CC5BD2589C29BEE01D2424477BE96E8D9F397823426297sha3_384: 61755325ae076cbc6c0a3695864cb2083e09cdebc296b6883ab784e498fc8f95dd845d04faca1138b21b5bc2a9facdd3ep_bytes: 558becb9280000006a006a004975f953timestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Cerbu.122888 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.top9
Elastic	malicious (high confidence)
DrWeb	Trojan.Inject1.5890
ClamAV	Win.Malware.Midie-9816731-0
Skyhigh	BehavesLike.Win32.Generic.wc
McAfee	GenericR-FYS!BAF8953BB76A
Cylance	unsafe
Sangfor	Ransom.Win32.Save.a
K7AntiVirus	Trojan ( 005896cb1 )
BitDefender	Gen:Variant.Cerbu.122888
K7GW	Trojan ( 003cee3e1 )
Cybereason	malicious.468be6
Arcabit	Trojan.Cerbu.D1E008
BitDefenderTheta	AI:Packer.E7E410A721
Symantec	SMG.Heur!gen
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Injector.TXR
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Agent.spvx
Alibaba	Trojan:Win32/Starter.ali1001008
NANO-Antivirus	Trojan.Win32.Agent.cscaqs
MicroWorld-eScan	Gen:Variant.Cerbu.122888
Avast	Win32:MBRlock-DV [Trj]
Rising	Trojan.Injector!1.DA79 (CLASSIC)
Emsisoft	Gen:Variant.Cerbu.122888 (B)
F-Secure	Trojan.TR/Inject.sbbeiuu
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.baf8953bb76aaf45
Sophos	Troj/DelfInj-FF
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Agent.gbto
Varist	W32/Agent.AKD.gen!Eldorado
Avira	TR/Inject.sbbeiuu
MAX	malware (ai score=89)
Antiy-AVL	GrayWare/Win32.Dropper.xuq
Kingsoft	malware.kb.a.998
Microsoft	Trojan:Win32/Vindor!pz
ViRobot	Trojan.Win32.A.Agent.1259520
ZoneAlarm	Trojan.Win32.Agent.spvx
GData	Win32.Trojan.PSE.8QQ7ZF
Google	Detected
AhnLab-V3	Trojan/Win32.Agent.R174319
VBA32	Trojan.Agent
ALYac	Gen:Variant.Cerbu.122888
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
Tencent	Trojan.Win32.Agent.ha
Yandex	Trojan.Agent!5hgSFj1Mg1k
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Dropper.XUQ!tr
AVG	Win32:MBRlock-DV [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)