TrojanDownloader:Win32/Berbew!pz removal

The TrojanDownloader:Win32/Berbew!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What TrojanDownloader:Win32/Berbew!pz virus can do?

Creates an indicator observed in Territorial Disputes report SIG40
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine TrojanDownloader:Win32/Berbew!pz?


File Info:
name: EE88883283E8D8372479.mlw
path: /opt/CAPEv2/storage/binaries/b7a2154975a6d7517fac9f695641e3b233d976dd1c2c22f02d0176037a8e9cc2
crc32: DC5C516D
md5: ee88883283e8d8372479bcf2c49d0ee2
sha1: c7f5e156c99ef9edab8a763e3bae1f2d3cf94d17
sha256: b7a2154975a6d7517fac9f695641e3b233d976dd1c2c22f02d0176037a8e9cc2
sha512: c8b5b04e31175348f7aee5a3205a0841462bc6027d8abba8185402f7d79ea127656cbf91bacd350df9b7eb5eeee9ecadc9e03d18055e059f4424c481e3be6eea
ssdeep: 1536:4zIcZvuj510xkxLbEhAZ04qvyR0Z3NCyVso:Cd251iDAZ6yRKgeso
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C3435CFB528E1A12CC0F0F7FA846A59EB538519E43FAC100CC61510BBEC2DD99F7AA51
sha3_384: b590bc9f474d3275387792037478fcb6137a36b0160f8663eb5644f3c2f308ce95796124a2b6bbf4afeb96ec9231aafa
ep_bytes: 909090909060b80010400090bbf87e40
timestamp: 2023-07-29 18:29:59

Version Info:
0: [No Data]

TrojanDownloader:Win32/Berbew!pz also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Backdoor.Hangup.B
ClamAV	Win.Trojan.Crypted-31
FireEye	Generic.mg.ee88883283e8d837
Skyhigh	BehavesLike.Win32.Generic.qh
McAfee	Trojan-FVOJ!EE88883283E8
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005780dd1 )
K7GW	Trojan ( 005780dd1 )
Cybereason	malicious.6c99ef
Arcabit	Backdoor.Hangup.B
Baidu	Win32.Trojan-Spy.Quart.a
VirIT	Worm.Win32.Berbew.G
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spy.Qukart
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Spy.Win32.Qukart.af
BitDefender	Backdoor.Hangup.B
NANO-Antivirus	Trojan.Win32.Qukart.jvpyiz
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan.Win32.Pornoasset.a
TACHYON	Backdoor/W32.Padodor
Sophos	Mal/Padodor-A
F-Secure	Trojan.TR/Spy.Qukart.NB
DrWeb	BackDoor.HangUp.43832
VIPRE	Backdoor.Hangup.B
Trapmine	malicious.high.ml.score
Emsisoft	Backdoor.Hangup.B (B)
Ikarus	Trojan.Crypt
Jiangmin	TrojanSpy.Qukart.ik
Google	Detected
Avira	TR/Spy.Qukart.NB
Antiy-AVL	Trojan[Proxy]/Win32.Qukart.gen
Kingsoft	malware.kb.a.1000
Microsoft	TrojanDownloader:Win32/Berbew!pz
ZoneAlarm	Trojan-Spy.Win32.Qukart.af
GData	Backdoor.Hangup.B
Varist	W32/Qukart.K.gen!Eldorado
AhnLab-V3	Win-Trojan/Berbew.51712
Acronis	suspicious
BitDefenderTheta	AI:Packer.6CDB3E0D1E
ALYac	Backdoor.Hangup.B
MAX	malware (ai score=86)
VBA32	BScope.Backdoor.Berbew
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Backdoor.Berbew!1.AE0A (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.BJQV!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove TrojanDownloader:Win32/Berbew!pz?

TrojanDownloader:Win32/Berbew!pz removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X