How to remove “Cerbu.151233”?

The Cerbu.151233 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Cerbu.151233 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality

How to determine Cerbu.151233?

File Info:
name: 33FC6E1F92C23FA635ED.mlw
path: /opt/CAPEv2/storage/binaries/53533a7cc701e445f369e264edc7c10d4e3e342fdacc48961563481a4728ce41
crc32: F0CBC2DF
md5: 33fc6e1f92c23fa635ed0754dd16ce44
sha1: bee024d1bb4c25aab236dc7274123c3bce13f271
sha256: 53533a7cc701e445f369e264edc7c10d4e3e342fdacc48961563481a4728ce41
sha512: 2e817dcda6d8c4583e72d05d37737ed5cf96cf247f70d7c95c30c853077af510f06ad158a072e9d61b7a2418eb9f9e8d87c1fff22704fcfbc43f621ad0eb8d85
ssdeep: 49152:IiE6+f1mv3KzIgA5xl5SnD38xh8tLZPJ8casvAlaoyYPHjm6BOfKVbLsubTOgIQq:Ii5+NcJpAnj8UtkcPQdyoDFOidosQL
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ABF5330D97F9007AC243CE326D239354AF237A546439AA797BCE95FF513B142960EF22
sha3_384: 0d33c5aa0fd7988a6a60fc56ebd025dd94f63c419511365d631eb340e7d44700d7ab1c9805bc45c4792b67342f639f26
ep_bytes: 558bec83c4d453565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:
Comments: This installation was built with Inno Setup: http://www.innosetup.com
CompanyName:                                                             
FileDescription: AfittyFiles Pro                                             
FileVersion: 1.0.0.8             
InternalName: 
OriginalFilename: 
ProductName: 
ProductVersion: 
Translation: 0x0409 0x04e4

Cerbu.151233 also known as:

How to remove Cerbu.151233?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.