Generic.BrResMon.1.1A977471 malicious file

The Generic.BrResMon.1.1A977471 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.BrResMon.1.1A977471 virus can do?

• Executable code extraction
• Creates RWX memory
• A process attempted to delay the analysis task.
• A process created a hidden window
• Unconventionial language used in binary resources: Indonesian
• Uses Windows utilities for basic functionality
• Deletes its original binary from disk
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Attempts to identify installed AV products by registry key
• Anomalous binary characteristics

Related domains:

How to determine Generic.BrResMon.1.1A977471?

File Info:
crc32: 8EC71979
md5: a9cf702e34fb3a1a8555e0a4b60bd17a
name: A9CF702E34FB3A1A8555E0A4B60BD17A.mlw
sha1: f6e348fa16b1a73576d3240c6d4b4ab74962348c
sha256: 6581739d522b31a088c24e4f6c1a186b880104db8ccf3ab841f32fda24ef97b7
sha512: b90dc7bd2e406fa64910880c73e0ef972e728ad549cfbdc889cff45d17266576ffb2f1b6ba2e0fe439f73bc6472533979017efe1de62650d11113f587ecdaef1
ssdeep: 6144:d86LmLtOplhOWI2xrRda//n0XODMFImmZ:dJLOIplhOX2E//npDcIVZ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Generic.BrResMon.1.1A977471 also known as:

How to remove Generic.BrResMon.1.1A977471?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.