Categories: Malware

Should I remove “Ser.Cerbu.753”?

The Ser.Cerbu.753 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ser.Cerbu.753 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
Creates an autorun.inf file
Authenticode signature is invalid
Attempts to create or modify a Browser Helper Object
Creates a copy of itself
Deletes executed files from disk
Created a service that was not started

How to determine Ser.Cerbu.753?


File Info:
name: 41AA7004A0EFF0145FC9.mlwpath: /opt/CAPEv2/storage/binaries/65b8b3994f4ba8c4aa960da9bf87e2d0d6517923ec3a456314f7d5b266b8a0f1crc32: B614B6B8md5: 41aa7004a0eff0145fc9f257d59409d6sha1: e27208bd9b8102e9c63bea5b3301dbbaf6f4170asha256: 65b8b3994f4ba8c4aa960da9bf87e2d0d6517923ec3a456314f7d5b266b8a0f1sha512: 99d4929656d37f2ed4fd99549961fc3b112ad824739e99182a66581cc863ca2fc48eb2f3db1a6a2841a71d3d6a6998e934f0d83544af52ade4d5b23fc5801f0fssdeep: 6144:Ct9JU9XS8GMCICzADJLHVbCyfqXozHpwIH4ymoSBWrK75V2e2Ma+es/nOy03rpoS:JDSxzAN3aIFSBKKtsa07RlxUUtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T1D9B48D61FF65C5F1D491917E1C9BB60606B6EBD10B1652CF26A83A2FBDB43C20E322D1sha3_384: 4e4edd9ed763833ddfb5fca3b3c97cfd2bfde9b0404411734d8ef8b48a7620b2c571dd0e9020df57895956bf78c3b2b8ep_bytes: 558bec538b5d08568b750c578b7d1085timestamp: 2010-07-21 15:01:14
Version Info:
Comments: CompanyName: 迅雷支持模块FileDescription: www.xunlei.comFileVersion: 5, 0, 0, 1InternalName: ThunderLegalCopyright: Copyright 2009LegalTrademarks: OLESelfRegister: OriginalFilename: Thunder.DLLPrivateBuild: ProductName: Thunder ModuleProductVersion: 5, 0, 0, 1SpecialBuild: Translation: 0x0409 0x04b0

Ser.Cerbu.753 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen6.21214
MicroWorld-eScan	Gen:Variant.Ser.Cerbu.753
FireEye	Generic.mg.41aa7004a0eff014
Skyhigh	BehavesLike.Win32.Dropper.gh
ALYac	Gen:Variant.Ser.Cerbu.753
Cylance	unsafe
Zillya	Downloader.BHO.Win32.1690
Cynet	Malicious (score: 100)
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 0017c68f1 )
K7AntiVirus	Trojan ( 0017c68f1 )
BitDefenderTheta	Gen:NN.ZedlaF.36802.Eu@@aqE2!8fb
VirIT	Trojan.Win32.Generic.LGL
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Koutodoor.GU
APEX	Malicious
ClamAV	Win.Malware.Scar-6746057-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ser.Cerbu.753
NANO-Antivirus	Trojan.Win32.BT.etkua
SUPERAntiSpyware	Trojan.Agent/Gen-Injector
Avast	Win32:Agent-ACUA [Drp]
Rising	Trojan.Meredrop!8.6CD (TFE:5:jU9QjL1WI8G)
Emsisoft	Gen:Variant.Ser.Cerbu.753 (B)
F-Secure	Trojan.TR/Rogue.4712135.14
VIPRE	Gen:Variant.Ser.Cerbu.753
TrendMicro	TROJ_DLOADR.SMO1
Sophos	Troj/Mdrop-JSK
Ikarus	Trojan-Downloader.Win32.BHO
Jiangmin	Trojan/Generic.aoix
Webroot	W32.Downloader.Gen
Varist	W32/Agent.EM.gen!Eldorado
Avira	TR/Rogue.4712135.14
Antiy-AVL	Trojan[Downloader]/Win32.BHO
Kingsoft	Win32.Trojan.Generic.a
Microsoft	Trojan:Win32/Multiverze
Xcitium	TrojWare.Win32.TrojanDownloader.Agent.BT_dll0@1d9fhs
Arcabit	Trojan.Ser.Cerbu.753
ViRobot	Trojan.Win32.A.Scar.28672.Q
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Ser.Cerbu.753
Google	Detected
AhnLab-V3	Trojan/Win32.BHO.R2876
McAfee	Downloader-BT.a.dll
MAX	malware (ai score=88)
VBA32	Trojan.Ditertag
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_DLOADR.SMO1
Tencent	Trojan.Win32.Koutodoor.xa
Yandex	Trojan.GenAsa!KQnQdVQ9Y1E
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/BHO.OAT!tr
AVG	Win32:Agent-ACUA [Drp]
DeepInstinct	MALICIOUS
alibabacloud	Trojan.Win.UnkAgent