Malware

Cerbu.24369 (B) removal guide

Malware Removal

The Cerbu.24369 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Cerbu.24369 (B) virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Cerbu.24369 (B)?


File Info:

name: 49A6805D532A7BF19436.mlw
path: /opt/CAPEv2/storage/binaries/071a6ea33ef191731c1f85d2d7df85730b0bed07bbc31fe043fed78a8816b65b
crc32: B3A563F7
md5: 49a6805d532a7bf1943671a96b8116b8
sha1: 0cce5f1c59b077176c34899eb358b7a9ca7f248c
sha256: 071a6ea33ef191731c1f85d2d7df85730b0bed07bbc31fe043fed78a8816b65b
sha512: d05be7ba2922dcbd2dd41854c444a39c890490ea9b6010d3f8540c272dbcaea942af1dbbeecc491682ef2abde1301d6ef8537bd8be22cd23d807b1b9de7f2a57
ssdeep: 24:etGSJESuBegpSOnAIMqBig/tkFPHtdV6ZDxT0uZhNe+hUPNnq:6Uk+jMHgeFPfIZDuule+h0q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T179519B1AA7F8462BF0B347349DB7431233B5F960DB7347AE08905279AC216641A71F72
sha3_384: 8ab53c706bfa06f7cbc83c021941cd179066045c9370f4166fa244db0b70a728dae151944159d06fbc9c67185478b2d7
ep_bytes: ff250020400000000000000000000000
timestamp: 2019-11-01 07:01:25

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: Logger.exe
LegalCopyright:
OriginalFilename: Logger.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Cerbu.24369 (B) also known as:

BkavW32.AIDetectNet.01
LionicTrojan.Win32.Generic.4!c
DrWebTrojan.Click3.27547
MicroWorld-eScanGen:Variant.Cerbu.24369
FireEyeGeneric.mg.49a6805d532a7bf1
McAfeeGenericRXFI-VG!49A6805D532A
CylanceUnsafe
VIPREGen:Variant.Cerbu.24369
SangforTrojan.Win32.AGEN.1033147
K7AntiVirusTrojan ( 005360f31 )
AlibabaTrojan:MSIL/Logger.2a8e77b7
K7GWTrojan ( 005360f31 )
Cybereasonmalicious.d532a7
ArcabitTrojan.Cerbu.D5F31
BitDefenderThetaGen:NN.ZemsilF.34592.am0@aeAyJNc
CyrenW32/MSIL_Agent.FR.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Agent.SQW
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R007C0PHB22
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Cerbu.24369
NANO-AntivirusTrojan.Win32.Click3.gflfrt
SUPERAntiSpywareTrojan.Agent/Gen-Logger
AvastWin32:TrojanX-gen [Trj]
TencentWin32.Trojan.Generic.Pezu
Ad-AwareGen:Variant.Cerbu.24369
EmsisoftGen:Variant.Cerbu.24369 (B)
ComodoMalware@#1bdhjv3ards9u
ZillyaTrojan.PePatch.Win32.3687
TrendMicroTROJ_GEN.R007C0PHB22
McAfee-GW-EditionGenericRXFI-VG!49A6805D532A
SophosML/PE-A
SentinelOneStatic AI – Malicious PE
GoogleDetected
AviraHEUR/AGEN.1235043
MAXmalware (ai score=87)
Antiy-AVLTrojan/Generic.ASMalwS.5105
MicrosoftTrojan:Win32/Occamy.C07
GDataGen:Variant.Cerbu.24369
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.C3568522
ALYacGen:Variant.Cerbu.24369
MalwarebytesTrojan.Logger.MSIL
RisingTrojan.IPLogger!1.B69D (CLASSIC)
IkarusTrojan-Spy.Logger
FortinetMSIL/Agent.SQW!tr
AVGWin32:TrojanX-gen [Trj]
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Cerbu.24369 (B)?

Cerbu.24369 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment