Categories: Malware

About “Ser.Cerbu.732” infection

The Ser.Cerbu.732 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ser.Cerbu.732 virus can do?

Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
Authenticode signature is invalid
Creates a copy of itself
Deletes executed files from disk

How to determine Ser.Cerbu.732?


File Info:
name: CFBEA127781C0D12CEDC.mlwpath: /opt/CAPEv2/storage/binaries/549b0d0271fce75add1dc855a12db15fe02432244697cad010e1a9d7ddb58adecrc32: B2767F7Dmd5: cfbea127781c0d12cedca04f1d44503esha1: 60f7ca126737146a6a0358e2c58b5a5bbc73e542sha256: 549b0d0271fce75add1dc855a12db15fe02432244697cad010e1a9d7ddb58adesha512: 73605f1147ac92c3750bb0abe14a163cea3eb47a2407935b92db4bde5e5481b74ac75d680c49bc20866c0509ff3b6c1b5947fd9c91aeab278ca5040d768b98a1ssdeep: 6144:dZayk5EDYF6qqnYN/bRpSk14VUjiXRUcjKX0CFQvy4lmtDCaKBoYSySx:L86yNlprbiXRUcjKEPvyt8oRxtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D1847B11F0C0D171D4B245BA5D6DEB3109FDB9F21F6869CBB7C80A894AB08D16B39B93sha3_384: dd121dd188aee0513c19f91811102d0dcea63c12f7629f7dfb2530e7ec1c8d4bb9bbd31007441ddfd7f927a0a0e17164ep_bytes: e8bdd40000e9000000006a1468288b45timestamp: 2015-10-21 03:19:10
Version Info:
0: [No Data]

Ser.Cerbu.732 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Ser.Cerbu.732
ClamAV	Win.Malware.Bayrob-9785177-1
FireEye	Generic.mg.cfbea127781c0d12
CAT-QuickHeal	TrojanSpy.Nivdort.DR3
Skyhigh	BehavesLike.Win32.Generic.fh
McAfee	Trojan-FHOH!CFBEA127781C
Malwarebytes	Trojan.Agent.KVTGen
K7AntiVirus	Trojan ( 004da8bd1 )
K7GW	Trojan ( 004da8bd1 )
Cybereason	malicious.267371
Arcabit	Trojan.Ser.Cerbu.732
Baidu	Win32.Trojan.Generic.an
Symantec	Trojan.Bayrob!gen6
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Bayrob.AA
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ser.Cerbu.732
SUPERAntiSpyware	Trojan.Agent/Gen-Bayrob
Avast	Win32:Evo-gen [Trj]
Sophos	Mal/Bayrob-A
F-Secure	Heuristic.HEUR/AGEN.1318777
VIPRE	Gen:Variant.Ser.Cerbu.732
TrendMicro	TROJ_BAYROB.SM9
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Ser.Cerbu.732 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1318777
MAX	malware (ai score=87)
Kingsoft	malware.kb.a.987
Microsoft	TrojanSpy:Win32/Nivdort.CB
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Ser.Cerbu.732
Varist	W32/Nivdort.I.gen!Eldorado
AhnLab-V3	Trojan/Win32.Dynamer.C1132175
BitDefenderTheta	Gen:NN.ZexaF.36744.yqW@aW0yM!d
ALYac	Gen:Variant.Ser.Cerbu.732
Cylance	unsafe
TrendMicro-HouseCall	TROJ_BAYROB.SM9
Rising	Trojan.Win32.Bayrod.b (CLASSIC)
Yandex	Trojan.GenAsa!nyx7Vy1BanU
Ikarus	Trojan.Win32.Bayrob
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Bayrob.AA!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)