Ransom • Trojan

Should I remove “Trojan-Ransom.Win32.Zerber.firn”?

The Trojan-Ransom.Win32.Zerber.firn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Ransom.Win32.Zerber.firn virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.Zerber.firn?


File Info:
crc32: 9A71B5B4
md5: b77a1c55a5ffaf154bcd524a04a40f5f
name: B77A1C55A5FFAF154BCD524A04A40F5F.mlw
sha1: 74f30995a63f0fa6d9f10e418a033b6d4eb91724
sha256: 44f6d395fbc3eb881e25620d3bee9957a0913786e301b9803195ae5fac7754ac
sha512: 392ca9a22c6188344e0bfadcbf555b3775bee8f1aebb057fc0fd5ad8bb4f00cc5549c8e21f0380bfc7f6a5d3e3b75bd5be450e7a7b1265977f0994f31496935e
ssdeep: 3072:qPzUQ2gyYwrf5c/bITKXnj9WzS9SryzgpW6Zk0uTt/Z5reUUr20gp+Xae4Lhm7kN:qGfsI23BNlMk0QPnyKeUm780JobGnO
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:
0: [No Data]

Trojan-Ransom.Win32.Zerber.firn also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005074321 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.4691
Cynet	Malicious (score: 100)
ALYac	Trojan.Ransom.Cerber.JD
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.1289125
Sangfor	Ransom.Win32.Enestedel.B!rsm
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 005074321 )
Cybereason	malicious.5a5ffa
Symantec	Ransom.Cerber
ESET-NOD32	a variant of Win32/Injector.DLYF
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Ransomware.Cerber-7553161-0
Kaspersky	Trojan-Ransom.Win32.Zerber.firn
BitDefender	Trojan.Ransom.Cerber.JD
NANO-Antivirus	Trojan.Win32.Enestedel.embuln
MicroWorld-eScan	Trojan.Ransom.Cerber.JD
Ad-Aware	Trojan.Ransom.Cerber.JD
Sophos	Mal/Generic-S + Mal/Cerber-Z
Comodo	Malware@#1x1z4rponuepl
BitDefenderTheta	Gen:NN.ZedlaF.34744.cy8@aeXquTmi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Mal_Cerber-NS3b
McAfee-GW-Edition	BehavesLike.Win32.Vopak.dc
FireEye	Generic.mg.b77a1c55a5ffaf15
Emsisoft	Trojan.Ransom.Cerber.JD (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1116898
Antiy-AVL	Trojan/Generic.ASMalwS.1F383D5
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Ditertag.A
Arcabit	Trojan.Ransom.Cerber.JD
AegisLab	Trojan.Win32.Generic.4!c
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.Ransom.Cerber.JD
AhnLab-V3	Trojan/Win32.Cerber.R195948
McAfee	Artemis!B77A1C55A5FF
MAX	malware (ai score=100)
VBA32	Trojan-Ransom.Zerber
TrendMicro-HouseCall	Mal_Cerber-NS3b
Rising	Trojan.Generic@ML.98 (RDML:XW4LX6mjO5uhIGxvPAFKbw)
Yandex	Trojan.GenAsa!063TkZfbKXQ
Ikarus	Trojan-Ransom.Enestedel
Fortinet	W32/Injector.DLWU!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan-Ransom.Win32.Zerber.firn?

Trojan-Ransom.Win32.Zerber.firn removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X