Should I remove “Cerbu.167453”?

The Cerbu.167453 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.167453 virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected
Unusual version info supplied for binary

How to determine Cerbu.167453?


File Info:
name: E1A6FF2BFEE3998FA99F.mlw
path: /opt/CAPEv2/storage/binaries/e3741a0d0dc85e108aba22ca68a19beb8aa9ead23524abb14cd6517f83180939
crc32: 6128ED85
md5: e1a6ff2bfee3998fa99f517a89be0b19
sha1: bea9a28e49fd821626173c9a37736dad3a1dcab1
sha256: e3741a0d0dc85e108aba22ca68a19beb8aa9ead23524abb14cd6517f83180939
sha512: 854f81fa235a095f9cd173e5b3d2d378b3b75b1ee3316e7e88b2978e12e4593943e626f329e677a5b1cd58a1022c1d42e01ee8b246d6170bf01881d0e8a3d2c2
ssdeep: 12288:IcqE4rUamXJZXjK8XkiH9qXeUlnvJ0udha2ssE4EDRyl+m4SjBoamk57s:IctKUPHEDV1nvssODRrmBoaZ5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BDE4025777C1CF10DBAC07BAC0D3A92417B8954B2273EB49798803E2AD127E86F46F55
sha3_384: 703b8c5d925836a7f043d1c8374580baac7c33df6e185d6102dc4cb9fb11123ec961911d93a24132efecc9476062b458
ep_bytes: ff250020400000000000000000000000
timestamp: 2080-10-20 12:10:15

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 4.2.51.0
InternalName: -.exe
LegalCopyright: © Microsoft Corporation
LegalTrademarks: 
OriginalFilename: -.exe
ProductName: 
ProductVersion: 4.2.51.0
Assembly Version: 4.2.51.0

Cerbu.167453 also known as:

Bkav	W32.AIDetectNet.01
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Cerbu.167453
ALYac	Gen:Variant.Cerbu.167453
Malwarebytes	Trojan.MalPack
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Agent.XX
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.GenericML.xnet
BitDefender	Gen:Variant.Cerbu.167453
Avast	Win32:RansomX-gen [Ransom]
Emsisoft	Gen:Variant.Cerbu.167453 (B)
VIPRE	Gen:Variant.Cerbu.167453
McAfee-GW-Edition	BehavesLike.Win32.Generic.jc
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.e1a6ff2bfee3998f
Sophos	MSIL/Agent-BJVK
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Cerbu.167453
MAX	malware (ai score=81)
Arcabit	Trojan.Cerbu.D28E1D
ZoneAlarm	UDS:Trojan.Win32.GenericML.xnet
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.Generic.C5403772
Acronis	suspicious
McAfee	Artemis!E1A6FF2BFEE3
VBA32	Malware-Cryptor.MSIL.AgentTesla.Heur
Cylance	unsafe
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Wacatac.B!tr
BitDefenderTheta	Gen:NN.ZemsilF.36132.Rm0@aWa4!Eo
AVG	Win32:RansomX-gen [Ransom]
DeepInstinct	MALICIOUS

How to remove Cerbu.167453?

Cerbu.167453 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X