BrResmon.97 (B) removal tips

The BrResmon.97 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BrResmon.97 (B) virus can do?

Executable code extraction
Compression (or decompression)
Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Attempts to delete volume shadow copies
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Creates a copy of itself
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine BrResmon.97 (B)?


File Info:
crc32: E2F3A4EA
md5: c951e6ea8580f5c61a23889efac127bd
name: C951E6EA8580F5C61A23889EFAC127BD.mlw
sha1: 55de585c55cb78a518415751a1f4c6cb9b51399f
sha256: c4f930598cac28b0c67f4fb0a611dd3e13c36189811f876814e5fd248f366f81
sha512: e63f5a9cc7befcf3efc444e9644d0f0b806980007906c3e55228980591371d079e4f2c233fb32751de791bc716e4244a411be4b3093c0091b11ac506299b929d
ssdeep: 6144:nfn53KIzTR5070deKn5wiN4vOeA9MTqB8qnjN8SCoK6dZq9kR2eOJVr4fLostX+:f53KITR507ceKJq/Xy3jN8YHHukR50V
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
LegalCopyright: Houzz Copyright xa9 2016  All rights reserved.
FileVersion: 4.5.9.8
CompanyName: Houzz
LegalTrademarks: Houzz Copyright xa9 2016  All rights reserved.
ProductName: 32Aurora
ProductVersion: 4.5.9.8
FileDescription: Adminscripts Ctf
Translation: 0x0409 0x04b0

BrResmon.97 (B) also known as:

K7AntiVirus	Trojan ( 0051a8021 )
Lionic	Trojan.Win32.Yakes.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.3953
Cynet	Malicious (score: 99)
ALYac	Trojan.Yakes.Gen
Cylance	Unsafe
Sangfor	Trojan.Win32.RanSerKD.31131819
Alibaba	Trojan:Win32/Yakes.c894f85d
K7GW	Trojan ( 0051a8021 )
Cybereason	malicious.a8580f
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Filecoder.Crysis.P
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Yakes.wwev
BitDefender	Gen:Variant.BrResmon.97
NANO-Antivirus	Trojan.Win32.Yakes.fhmnxe
MicroWorld-eScan	Gen:Variant.BrResmon.97
Tencent	Win32.Trojan.Raas.Auto
Ad-Aware	Gen:Variant.BrResmon.97
Sophos	Mal/Generic-S
Comodo	Malware@#ajwmys33s9a4
BitDefenderTheta	Gen:NN.ZexaF.34058.umKfaGfjyefi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.fc
FireEye	Generic.mg.c951e6ea8580f5c6
Emsisoft	Gen:Variant.BrResmon.97 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.clufm
Webroot	W32.Trojan.RanSerKD
Avira	HEUR/AGEN.1126114
Antiy-AVL	Trojan/Generic.ASMalwS.272489B
Microsoft	Trojan:Win32/Skeeyah.A!bit
GData	Gen:Variant.BrResmon.97
AhnLab-V3	Malware/Win32.Generic.C2638748
McAfee	Artemis!C951E6EA8580
MAX	malware (ai score=100)
Panda	Trj/Genetic.gen
Yandex	Trojan.GenAsa!epO0jCx7bS4
Ikarus	Trojan-Ransom.GandCrab
Fortinet	W32/Yakes.P!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Botnet.Yakes.HgAASQ4A

How to remove BrResmon.97 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

BrResmon.97 (B) removal tips