Trojan-Ransom.Win32.Zerber.fcxb removal instruction

The Trojan-Ransom.Win32.Zerber.fcxb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Ransom.Win32.Zerber.fcxb virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Expresses interest in specific running processes
Reads data out of its own binary image
Creates an excessive number of UDP connection attempts to external IP addresses
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Attempts to delete volume shadow copies
Exhibits behavior characteristic of Cerber ransomware
EternalBlue behavior
Generates some ICMP traffic
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Ransom.Win32.Zerber.fcxb?


File Info:
crc32: C95E62D2
md5: 9127174305820c03e34f495d72b5c9d7
name: 9127174305820C03E34F495D72B5C9D7.mlw
sha1: 2c8a883c60dc96bde643f69f676c012a18087605
sha256: 42c02e63de5d40ec1a2d17b238701eb90d21954f971bfde374245e19761e67e9
sha512: 69444a1cd93747637807254671953f9e2ac41c7623edc63f42d0baf6c1b8e81dd935b211ae880357d45dba0913bb66a9cbc4ce7b2adfd297f90f32a8f7a4104a
ssdeep: 12288:j4o8gipPQDbPQ66csOZbOm+yxRGE1pKcd7nQD:j4oVgPWPQIqm3L/pKcd7QD
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: GNU GPL v3.0
InternalName: calibre-portable-2.43.0
FileVersion: 2.43.0.0
CompanyName: calibre-ebook.com
LegalTrademarks: calibre is a registered U.S. trademark number 3,666,525
ProductName: calibre
ProductVersion: 2.43.0.0
FileDescription: Calibre Portable
OriginalFilename: calibre-portable-2.43.0.exe
Translation: 0x0409 0x04b0

Trojan-Ransom.Win32.Zerber.fcxb also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0055e3ef1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.7074
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Jaiko.2739
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Zerber.40e9dff7
K7GW	Trojan ( 0055e3ef1 )
Cybereason	malicious.305820
ESET-NOD32	Win32/Filecoder.Cerber.B
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Zerber.fcxb
BitDefender	Gen:Variant.Jaiko.2739
NANO-Antivirus	Trojan.Win32.Zerber.falfue
MicroWorld-eScan	Gen:Variant.Jaiko.2739
Tencent	Win32.Trojan.Raasc.Auto
Ad-Aware	Gen:Variant.Jaiko.2739
Sophos	Mal/Generic-S
Comodo	Malware@#3hvecyougi2ib
BitDefenderTheta	Gen:NN.ZexaF.34758.Jy1@aa1j5Lmi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_CERBER.F116KG
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.hc
FireEye	Generic.mg.9127174305820c03
Emsisoft	Gen:Variant.Jaiko.2739 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Zerber.afj
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1123244
eGambit	Unsafe.AI_Score_99%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Glupteba!ml
Arcabit	Trojan.Jaiko.DAB3
AegisLab	Trojan.Win32.Zerber.j!c
GData	Gen:Variant.Jaiko.2739
AhnLab-V3	Trojan/Win32.Zerber.C1660496
McAfee	Generic.aqs
MAX	malware (ai score=87)
VBA32	Hoax.Zerber
Malwarebytes	MachineLearning/Anomalous.95%
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_CERBER.F116KG
Rising	Trojan.Generic@ML.82 (RDML:+j44yv6xtoxyUnjx/gmrQg)
Yandex	Trojan.Zerber!4pMYeq6ltgI
Ikarus	Trojan-Ransom.GandCrab
Fortinet	W32/Zerber.ACBV!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan-Ransom.Win32.Zerber.fcxb?

Trojan-Ransom.Win32.Zerber.fcxb removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan-Ransom.Win32.Zerber.fcxb removal instruction