Cerbu.8679 removal instruction

The Cerbu.8679 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Cerbu.8679 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
A process attempted to delay the analysis task.
Performs some HTTP requests
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

tpbhumantest.bid

ww12.tpbhumantest.bid

a.tomx.xyz

How to determine Cerbu.8679?


File Info:
crc32: D87F56D6
md5: db8f976ef0dbf98289cadc01c8d114a7
name: DB8F976EF0DBF98289CADC01C8D114A7.mlw
sha1: 4cd1a33206a51302b870aecb6e03b6b8a8b765fd
sha256: dd131733731214b23cc2c11d6a1ddd4d343b4166680d00a3ba2ebed4ac4d1787
sha512: 2ae3772b018b7bc74dfad5221fd7e9ac6d5254df85c425a5d8344f247576f0be9f214819c231e254a7eb7796746f044a3d37d8f85f7ba711ab32decbe42cf664
ssdeep: 96:e0asbs4uBaa2KWEtpxhDWrfSIDbXALDa2:Nbb1a2ytBafVAa
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: grab
FileVersion: 1.00
CompanyName: noOrg
ProductName: Project1
ProductVersion: 1.00
OriginalFilename: grab.exe

Cerbu.8679 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan-Downloader ( 004dd93c1 )
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.Surveyer.25
ALYac	Gen:Variant.Cerbu.8679
Malwarebytes	MachineLearning/Anomalous.94%
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan-Downloader ( 004dd93c1 )
Cybereason	malicious.ef0dbf
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanClicker.VB.OJW
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Cerbu.8679
NANO-Antivirus	Trojan.Win32.VB.ewxrfz
MicroWorld-eScan	Gen:Variant.Cerbu.8679
Ad-Aware	Gen:Variant.Cerbu.8679
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Trojan.mz
FireEye	Gen:Variant.Cerbu.8679
Emsisoft	Gen:Variant.Cerbu.8679 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1107785
Antiy-AVL	Trojan/Generic.ASMalwS.23F8FC5
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Cerbu.8679
AhnLab-V3	Malware/Win32.Generic.R217269
McAfee	Artemis!DB8F976EF0DB
MAX	malware (ai score=97)
VBA32	Trojan.Surveyer
Ikarus	Trojan.Win32.TrojanClicker
Fortinet	W32/Generic.AC.2F5D9!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Cerbu.8679?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Cerbu.8679 removal instruction