How to remove "ML/PE-A + Mal/Cerber-AA"?

The ML/PE-A + Mal/Cerber-AA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ML/PE-A + Mal/Cerber-AA virus can do?

Executable code extraction
Compression (or decompression)
Attempts to connect to a dead IP:Port (4 unique times)
Enumerates user accounts on the system
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Creates an excessive number of UDP connection attempts to external IP addresses
Performs some HTTP requests
Sniffs keystrokes
Attempts to modify desktop wallpaper
Exhibits behavior characteristic of Cerber ransomware
Attempts to execute a binary from a dead or sinkholed URL
Creates a hidden or system file
Attempts to modify proxy settings
Attempts to access Bitcoin/ALTCoin wallets
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

api.blockcypher.com

btc.blockr.io

bitaps.com

chain.so

ocsp.digicert.com

How to determine ML/PE-A + Mal/Cerber-AA?


File Info:
crc32: 06882E8A
md5: f36f806547b6336c2d45d361a43e836c
name: F36F806547B6336C2D45D361A43E836C.mlw
sha1: 04e8b0ada4dfa85917c499cde2148c0932e9881e
sha256: 1dee943c3d775f020cb154b63a3420cf319543bc1b1ae0fb3ed203a288c2ec48
sha512: 67a1b5d8f2eae240072c72c7c90b0eeb324d7d4424b3d95dd9a6417905f22b9f876f5727cf5ba5de5e8b98950da1d0bf20d6bb80cd842fc9c85ff44b4d40a82d
ssdeep: 6144:jGC7W7BU9pVgmFsWNMv1lhksMeNm5gwz6O5MUct1jxINdFUsWNM6S:Ba7gMDv1Lc5gwJTctbIHl6S
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
0: [No Data]

ML/PE-A + Mal/Cerber-AA also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Ransom.Cerber.ZR
FireEye	Generic.mg.f36f806547b6336c
McAfee	Artemis!F36F806547B6
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Injector.SJ
K7AntiVirus	Trojan ( 00503d011 )
BitDefender	Trojan.Ransom.Cerber.ZR
K7GW	Trojan ( 00503d011 )
Cybereason	malicious.547b63
Symantec	Ransom.Cerber
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Ransomware.Cerber-9168474-0
Kaspersky	HEUR:Trojan-Ransom.Win32.Zerber.gen
Alibaba	Trojan:Win32/Injector.6054eb2c
NANO-Antivirus	Trojan.Nsis.Zerber.elfdwn
AegisLab	Trojan.Win32.Generic.4!c
Tencent	Win32.Trojan.Raas.Auto
Ad-Aware	Trojan.Ransom.Cerber.ZR
Sophos	ML/PE-A + Mal/Cerber-AA
F-Secure	Heuristic.HEUR/AGEN.1102531
DrWeb	Trojan.Encoder.4691
Zillya	Trojan.Ransom.Win32.1467
McAfee-GW-Edition	BehavesLike.Win32.ObfusRansom.dc
Emsisoft	Trojan.Ransom.Cerber.ZR (B)
Ikarus	Trojan.NSIS.Injector
Avira	HEUR/AGEN.1102531
MAX	malware (ai score=99)
Microsoft	Trojan:Win32/Tiggre!rfn
Arcabit	Trojan.Ransom.Cerber.ZR
SUPERAntiSpyware	Ransom.Cerber/Variant
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Zerber.gen
GData	Trojan.Ransom.Cerber.ZR
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Cerber.R194466
ALYac	Trojan.Ransom.Cerber.ZR
VBA32	Trojan.Encoder
Malwarebytes	Malware.AI.1796488274
Panda	Trj/CI.A
ESET-NOD32	NSIS/Injector.SJ
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_72%
Fortinet	W32/Injector.TD!tr
Webroot	W32.Trojan.Gen
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Ransom.Cerber.HyoDOAUA

How to remove ML/PE-A + Mal/Cerber-AA?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “ML/PE-A + Mal/Cerber-AA”?