Cerbu.88406 (B) removal instruction

The Cerbu.88406 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.88406 (B) virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

How to determine Cerbu.88406 (B)?


File Info:
crc32: 0790933D
md5: 110641d5114f7402465163758233ce2c
name: 110641D5114F7402465163758233CE2C.mlw
sha1: d4230515c758fa73b02e07be48f18ca882fd7283
sha256: 167c4f5fa109a3e98c23f7e7bf805baaad3b581f3b22aaaa909ca1078eea8b25
sha512: d824c6b562d11fa52b933b2dc020f8a43890993ad5d803278cbc255ad1ba0732dab17ed07f724127808cb981d026a934ea196c4a066650f4800fca8593fcf8c1
ssdeep: 1536:owP/kNQKLjWDyy1o5I0hJUEbooPRrKKRRyShdaU6UE:bMNQKPWDyDI0hJltZrpRRyYAU6F
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C) Microsoft Corporation. All rights reserved.
InternalName: Notepad
FileVersion: 5.1.2600.5512 (xpsp.080413-2105)
CompanyName: Microsoft Corporation
ProductName: Microsoft(R) Windows(R) Operating System
ProductVersion: 5.1.2600.5512
FileDescription: x8bb0x4e8bx672c
OriginalFilename: NOTEPAD.EXE
Translation: 0x0804 0x04b0

Cerbu.88406 (B) also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Cerbu.88406
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Cerbu.88406
Cybereason	malicious.5114f7
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Packed.Win32.Katusha.o
MicroWorld-eScan	Gen:Variant.Cerbu.88406
Ad-Aware	Gen:Variant.Cerbu.88406
Sophos	ML/PE-A + ATK/Shellter-AC
TrendMicro	Backdoor.Win32.SWRORT.SMB
FireEye	Generic.mg.110641d5114f7402
Emsisoft	Gen:Variant.Cerbu.88406 (B)
Avira	HEUR/AGEN.1124598
Microsoft	Trojan:Win32/Swrort.A
Arcabit	Trojan.Cerbu.D15956
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Cerbu.88406
McAfee	Packed-FCH!110641D5114F
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Swrort
TrendMicro-HouseCall	Backdoor.Win32.SWRORT.SMB
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazrNWDJjzpjgOrBRutOUJjuK)
Ikarus	Trojan.Win32.Dialer
Qihoo-360	HEUR/QVM08.0.8EA5.Malware.Gen

How to remove Cerbu.88406 (B)?

Cerbu.88406 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X