Cerbu.88406 removal instruction

The Cerbu.88406 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Cerbu.88406 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

How to determine Cerbu.88406?


File Info:
crc32: DE361E89
md5: 5de904725f469ffd32caf15685b2593c
name: 5DE904725F469FFD32CAF15685B2593C.mlw
sha1: f6a9f781f73765829aa8a83c1cf536dd44807eb6
sha256: 6bb5bf00f2f8dbeacbf80549d04d46b375419f15e6d3be4e94be1e0c8dc1e718
sha512: 7cd67827bd1e9efdd685a4124ed22a8656a6c4d7d28d8a722484f7966667a1974e23d3314fe57af356b0c730a273e98cf440459dbd8d834796eb6ed00d575292
ssdeep: 1536:kwOnbNQKjTfGLIEWDyy1o5I0hJUEbooPRrKKRRySRvSJscSM:WNQKj6TWDyDI0hJltZrpRRyw6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: (C) Microsoft Corporation. All rights reserved.
InternalName: Notepad
FileVersion: 5.1.2600.5512 (xpsp.080413-2105)
CompanyName: Microsoft Corporation
ProductName: Microsoft(R) Windows(R) Operating System
ProductVersion: 5.1.2600.5512
FileDescription: x8bb0x4e8bx672c
OriginalFilename: NOTEPAD.EXE
Translation: 0x0804 0x04b0

Cerbu.88406 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Cerbu.88406
ALYac	Gen:Variant.Cerbu.88406
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Backdoor:Win32/Swrort.6e9787ac
Cybereason	malicious.25f469
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Cerbu.88406
Ad-Aware	Gen:Variant.Cerbu.88406
Sophos	ML/PE-A + ATK/Shellter-AC
TrendMicro	Backdoor.Win32.SWRORT.SMB
McAfee-GW-Edition	MalHeur-FAG!5DE904725F46
FireEye	Generic.mg.5de904725f469ffd
Emsisoft	Gen:Variant.Cerbu.88406 (B)
Avira	HEUR/AGEN.1124598
Microsoft	Trojan:Win32/Swrort.A
Arcabit	Trojan.Cerbu.D15956
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Cerbu.88406
AhnLab-V3	Trojan/Win32.RL_Generic.R362731
McAfee	MalHeur-FAG!5DE904725F46
MAX	malware (ai score=80)
VBA32	BScope.Trojan.Swrort
TrendMicro-HouseCall	Backdoor.Win32.SWRORT.SMB
Rising	Malware.Heuristic!ET#99% (RDMK:cmRtazq+w1/vLj1MEy5TYNCn3MJa)
Ikarus	Trojan.Win32.Dialer
Fortinet	W32/Generic.AC.3A1D4B!tr
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	HEUR/QVM08.0.D82F.Malware.Gen

How to remove Cerbu.88406?

Cerbu.88406 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X