Cerbu.78437 removal

The Cerbu.78437 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.78437 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Cerbu.78437?


File Info:
name: F68DED6C22D491819ABF.mlw
path: /opt/CAPEv2/storage/binaries/967a245f20435159b0d0b8c2452394399f758daf13d5f8b88b570d17ea897f7e
crc32: 27AB2359
md5: f68ded6c22d491819abfdf3935b4b084
sha1: 874f57ff8319d1e660d567b67823ccbdccbe71e3
sha256: 967a245f20435159b0d0b8c2452394399f758daf13d5f8b88b570d17ea897f7e
sha512: 77c5495f9a6f03fda868c05b82caa5800435310698d955412f7a0346d63f041065ab697fe441a33e5ed2c5f3c6e167e62dece994427d352bbc8c5142a2007e7e
ssdeep: 6144:LEK25f5ySIcWLsxpa24DYM6SB6v+qLnAzYmhVOp:LMpASIcWYxBU6hAJV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T186A49D147640C4B2E3190B311856E6F459A9AC3916D8E48FF3383E7A6E312D3977B28F
sha3_384: 019a0addb53c6e160d45c55e9204b2794adb04d9ec33a4b280022085727c57eaec5643fe872643fe56418e21284ffd63
ep_bytes: 7527a801755483e002740d395dfc7719
timestamp: 2013-08-07 12:40:06

Version Info:
0: [No Data]

Cerbu.78437 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Variant.Cerbu.78437
ClamAV	Win.Trojan.Urelas-9635181-0
FireEye	Generic.mg.f68ded6c22d49181
CAT-QuickHeal	Trojan.Bulta.B3
McAfee	Artemis!F68DED6C22D4
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Baidu	Win32.Trojan.Urelas.a
VirIT	Trojan.Win32.AVKill.BWME
Cyren	W32/Urelas.AP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Cerbu.78437
Avast	MBR:Plite-I [Rtk]
Tencent	Trojan.Win32.Urelas.16000132
Emsisoft	Gen:Variant.Cerbu.78437 (B)
VIPRE	Gen:Variant.Cerbu.78437
McAfee-GW-Edition	BehavesLike.Win32.Generic.gm
Trapmine	malicious.moderate.ml.score
Sophos	ML/PE-A
Ikarus	Trojan.Win32.Gupboot
GData	Win32.Trojan.PSE.1CYCYN2
MAX	malware (ai score=81)
Antiy-AVL	Trojan[Downloader]/Win32.Urelas.ab
Xcitium	TrojWare.Win32.Gupboot.B@51qmpc
Arcabit	Trojan.Cerbu.D13265
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Trojan/Win.LP.R566902
Acronis	suspicious
ALYac	Gen:Variant.Cerbu.78437
TACHYON	Trojan/W32.Agent.450560.VS
Malwarebytes	Urelas.Trojan.Downloader.DDS
TrendMicro-HouseCall	TROJ_GEN.R03BH0CDP23
Rising	Trojan.Gupboot!1.9CEA (CLASSIC)
Yandex	Trojan.Plite!x1Q+lQsIIYc
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.BNXW!tr
BitDefenderTheta	Gen:NN.ZexaF.36164.BmY@amjhs6c
AVG	MBR:Plite-I [Rtk]
DeepInstinct	MALICIOUS

How to remove Cerbu.78437?

Cerbu.78437 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X