Malware

Cerbu.63086 removal instruction

Malware Removal

The Cerbu.63086 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Cerbu.63086 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Cerbu.63086?



File Info:

crc32: 004DA1B7
md5: a35189bbe526f95125f313585a23c091
name: A35189BBE526F95125F313585A23C091.mlw
sha1: 571507b33c3bb4641562e86f66fab4068a807067
sha256: 97ffdd15bd339158c3569a1183d8d42250932c262a570bf230db6e741b5eb815
sha512: b233916b3c56bf62098cda4a82f3e234ce9dbe20d60d055d6743464d0d75ab4890006327ea45c8f38f08284616f01f373ebe2a260b75cc1d0a74e2dae42169c5
ssdeep: 96:qGhDBU9ZsETvsxblLSP8+Uqngf02CyZcFKfgfdlfBzNt:qGcoET1P8+UqVwfgFlfD
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2019
Assembly Version: 1.0.0.0
InternalName: DHTokenGrabber.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: DHTokenGrabber
ProductVersion: 1.0.0.0
FileDescription: DHTokenGrabber
OriginalFilename: DHTokenGrabber.exe

Cerbu.63086 also known as:

K7AntiVirusTrojan ( 700000121 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.26221
CynetMalicious (score: 100)
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
ALYacGen:Variant.Cerbu.63086
CylanceUnsafe
ZillyaTrojan.Agent.Win32.1062136
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWTrojan ( 700000121 )
Cybereasonmalicious.be526f
CyrenW32/Razy.CN.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/PSW.Discord.AP
APEXMalicious
AvastWin32:PWSX-gen [Trj]
ClamAVWin.Packed.Razy-9878208-0
KasperskyHEUR:Trojan-PSW.MSIL.Agent.gen
BitDefenderGen:Variant.Cerbu.63086
MicroWorld-eScanGen:Variant.Cerbu.63086
Ad-AwareGen:Variant.Cerbu.63086
SophosML/PE-A + Mal/Disteal-B
F-SecureHeuristic.HEUR/AGEN.1127855
BitDefenderThetaGen:NN.ZemsilF.34050.am0@auG7Ynb
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.MSIL.DISCHOARD.SM
McAfee-GW-EditionPWS-FCML!A35189BBE526
FireEyeGeneric.mg.a35189bbe526f951
EmsisoftGen:Variant.Cerbu.63086 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.PSW.MSIL.gas
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1127855
MicrosoftPWS:MSIL/Discord
GridinsoftSpy.Win32.Gen.dd!n
ArcabitTrojan.Cerbu.DF66E
SUPERAntiSpywareTrojan.Agent/Gen-DiscordStealer
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agent.gen
GDataMSIL.Trojan-Stealer.Dhaxx.A
AhnLab-V3Trojan/Win32.Cordis.R285106
McAfeePWS-FCML!A35189BBE526
MAXmalware (ai score=80)
VBA32TScope.Trojan.MSIL
MalwarebytesSpyware.DHTokenGrabber
TrendMicro-HouseCallTrojanSpy.MSIL.DISCHOARD.SM
RisingStealer.Discord!1.B7AA (CLASSIC)
IkarusTrojan.MSIL.PSW
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.RCF!tr.pws
AVGWin32:PWSX-gen [Trj]
Qihoo-360HEUR/QVM03.0.ED73.Malware.Gen

How to remove Cerbu.63086?

Cerbu.63086 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment