Should I remove “Cerbu.201945”?

The Cerbu.201945 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.201945 virus can do?

Sample contains Overlay data
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics
CAPE detected the MetaStealer malware family
Binary file triggered YARA rule

How to determine Cerbu.201945?


File Info:
name: 8A35B66405CAF752A644.mlw
path: /opt/CAPEv2/storage/binaries/4a66213d271600cdc34387751702c6ca33be7caf3160331ffb2e99aa26b3cb00
crc32: 7E5A8428
md5: 8a35b66405caf752a6443bf80ff3fd99
sha1: d2728597f3460256503a01dec49211a8749e4fd8
sha256: 4a66213d271600cdc34387751702c6ca33be7caf3160331ffb2e99aa26b3cb00
sha512: 54bc17481372cf9ee4a07b2b3a6d94cb084c0e2b05d2f53837c42b2bd09b537beae8140fd55702ed6418435b9782c9c198c94d64f676db22fca5bcf73c8b347e
ssdeep: 3072:OLdHPgUSkUKr8T/nMxN1UpgBbH1dP1Ab8e8hA:ErqameH1dP1Ab
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1FB44D4583647A97ECA6F883D9C700CD4767CBC621206AB079D8EF0E8793B7919B051F6
sha3_384: 4b0ed685b9322af86a0b0cf01c330aaf0c11c3b7846fe9350c2df9127e460b302d0db65c352a0eefa89a830cf8ef805c
ep_bytes: ff250020001000000000000000000000
timestamp: 2023-06-05 12:49:27

Version Info:
0: [No Data]

Cerbu.201945 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Cerbu.4!c
MicroWorld-eScan	Gen:Variant.Cerbu.201945
FireEye	Gen:Variant.Cerbu.201945
Skyhigh	BehavesLike.Win32.Infected.dt
McAfee	Artemis!8A35B66405CA
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 00584baa1 )
K7GW	Riskware ( 00584baa1 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	Trojan.Gen.MBT
Elastic	Windows.Trojan.Generic
BitDefender	Gen:Variant.Cerbu.201945
Sophos	Mal/Generic-S
VIPRE	Gen:Variant.Cerbu.201945
TrendMicro	TrojanSpy.Win32.REDLINE.YXECHZ
Emsisoft	Gen:Variant.Cerbu.201945 (B)
SentinelOne	Static AI – Suspicious PE
Varist	W32/MSIL_Agent.FTP.gen!Eldorado
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Trojan:Win32/Acll
Arcabit	Trojan.Cerbu.D314D9
GData	Gen:Variant.Cerbu.201945
Google	Detected
ALYac	Gen:Variant.Cerbu.201945
MAX	malware (ai score=89)
DeepInstinct	MALICIOUS
Malwarebytes	Generic.Spyware.Stealer.DDS
TrendMicro-HouseCall	TrojanSpy.Win32.REDLINE.YXECHZ
Fortinet	MSIL/RedLineStealer.895D!tr
Panda	Trj/Chgt.AD
alibabacloud	Trojan:Win/Cerbu

How to remove Cerbu.201945?

Cerbu.201945 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X