Cerbu.190062 malicious file

The Cerbu.190062 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.190062 virus can do?

Reads data out of its own binary image
Authenticode signature is invalid

How to determine Cerbu.190062?


File Info:
name: A5EA38033138113A7CAF.mlw
path: /opt/CAPEv2/storage/binaries/3abee23acb129411320061d26ad074bdb4bc8850c9ee52c18db9184c6034bbc0
crc32: 7D6C65D7
md5: a5ea38033138113a7caf710a40a19ff1
sha1: c3c2d672a966a88efa62eeb6c9f1c0d60f3c6ff1
sha256: 3abee23acb129411320061d26ad074bdb4bc8850c9ee52c18db9184c6034bbc0
sha512: 884b80620a01516ee2a4b4e7b6eb5d84ace6cb691ec76ddd5a5572a9ddc7e543a7f11e22007b70f2527098bc1b3bb218911509e4fcb849d829f13fbd18cf22c6
ssdeep: 3072:TksEVXkiKMcOiryZdu2P588Pitvd1t4F+iDsbU3OCDn2S4OVIopzqtUBLr/vba3:ofVcOiOP9581df48ssYOCL2qz9H2
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E7F48C11B2E580BBD1B6113018B62F3A9BFDBD064625DE87A334FE6E5D31640ED19B0E
sha3_384: fc3779e5aa311e668a4da9f88e8aa91ba4ffe4f53aeff81ac8ad40f063c956f3844623485c3c9dd95fac85cee506fac9
ep_bytes: 558bec6aff68f8884a00688882490064
timestamp: 2006-02-01 23:02:14

Version Info:
Comments: 
CompanyName: www.mumayi.net
FileDescription: Rootkit detection utility
FileVersion: 1.70
InternalName: 
LegalCopyright: Copyright (C) 2005-2006 mumayi
LegalTrademarks: 
OriginalFilename: 
PrivateBuild: 
ProductName: Sysinternals Rootkitrevealer
ProductVersion: 1.70
SpecialBuild: 
Translation: 0x0409 0x04b0

Cerbu.190062 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Cerbu.190062
FireEye	Generic.mg.a5ea38033138113a
Skyhigh	BehavesLike.Win32.Generic.bz
McAfee	Artemis!A5EA38033138
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Agent.Vl41
Arcabit	Trojan.Cerbu.D2E66E
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Cerbu.190062
Emsisoft	Gen:Variant.Cerbu.190062 (B)
VIPRE	Gen:Variant.Cerbu.190062
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Win32.Scar
Webroot	W32.Trojan.Gen
Google	Detected
Antiy-AVL	Trojan/Win32.Wacatac
Kingsoft	malware.kb.a.950
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Trojan.PSE.13N8BB
Varist	W32/Agent.HGL.gen!Eldorado
ALYac	Gen:Variant.Cerbu.190062
MAX	malware (ai score=81)
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09IR23
Rising	Trojan.Generic@AI.100 (RDML:9LhmnyIIeXHElFBLXHjX1g)
MaxSecure	Trojan.Malware.218835087.susgen
Fortinet	W32/Swisyn.R!tr
DeepInstinct	MALICIOUS

How to remove Cerbu.190062?

Cerbu.190062 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X