Malware

Generic.BrResMon.1.A7C5220D information

Malware Removal

The Generic.BrResMon.1.A7C5220D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.BrResMon.1.A7C5220D virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Attempts to delete volume shadow copies
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Creates a copy of itself
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

How to determine Generic.BrResMon.1.A7C5220D?


File Info:

crc32: 334B8687
md5: f157af7f9f01164662cbed0c2cd65313
name: F157AF7F9F01164662CBED0C2CD65313.mlw
sha1: 6024f9ca28f9c0dac3b23896800a059730edd508
sha256: 119af3a679a87bf3991bdc21dbbf17956e04023daefc4c4c0127c6b3a22e374a
sha512: 5aac434c27ada42fb99bf1fdf2506f50be9f7cd7bfeaf98760c1a1bf903e1eba3ac091d7b630040c33522cac13f0eb4938678de25ec5c01e479557e714e14e4a
ssdeep: 6144:ob7VvkX1TkC65PuZXWpWp3mHWnb+ENn/rJ:eV8X1TkC6QkpWp34Wnb5Nd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2017, itnoordourik
FileVersion: 10.1.10.11
ProductVersion: 10.1.10.11
Translation: 0x0809 0x04b0

Generic.BrResMon.1.A7C5220D also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 003e58dd1 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.24557
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Chapak.ZZ5
ALYacTrojan.Ransom.Crysis
CylanceUnsafe
ZillyaBackdoor.Androm.Win32.49285
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaRansom:Win32/Gandcrab.563f131a
K7GWTrojan ( 003e58dd1 )
Cybereasonmalicious.f9f011
CyrenW32/S-c5d37cab!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GDBE
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.Emotet-6451821-0
KasperskyHEUR:Trojan-Ransom.Win32.GandCrypt.gen
BitDefenderDeepScan:Generic.BrResMon.1.A7C5220D
NANO-AntivirusTrojan.Win32.Encoder.exywhb
ViRobotTrojan.Win32.Agent.206336.Q
MicroWorld-eScanDeepScan:Generic.BrResMon.1.A7C5220D
TencentMalware.Win32.Gencirc.10b84bff
Ad-AwareDeepScan:Generic.BrResMon.1.A7C5220D
SophosMal/Generic-S + Mal/Ransom-FQ
ComodoTrojWare.Win32.NeutrinoPOS.D@7iu3t4
BitDefenderThetaGen:NN.ZexaF.34790.qu0@aWVgxNaO
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_HPGANDCRAB.SMG2
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeGeneric.mg.f157af7f9f011646
EmsisoftDeepScan:Generic.BrResMon.1.A7C5220D (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.GandCrypt.bc
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1126869
eGambitUnsafe.AI_Score_99%
MicrosoftRansom:Win32/Gandcrab.SF!MTB
ArcabitDeepScan:Generic.BrResMon.1.A7C5220D
AegisLabTrojan.Win32.GandCrypt.tpjb
ZoneAlarmHEUR:Trojan-Ransom.Win32.GandCrypt.gen
GDataDeepScan:Generic.BrResMon.1.A7C5220D
TACHYONRansom/W32.FileCryptor.262656
AhnLab-V3Win-Trojan/MalPe34.Suspicious.X2029
Acronissuspicious
McAfeeGenericRXEB-KP!F157AF7F9F01
MAXmalware (ai score=96)
VBA32TrojanBanker.NeutrinoPOS
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
TrendMicro-HouseCallRansom_HPGANDCRAB.SMG2
RisingMalware.Obscure/Heur!1.9E03 (CLASSIC)
YandexTrojan.GandCrypt!QEUzWLmoJ84
IkarusTrojan-Dropper.Win32.Danabot
MaxSecureRansomeware.CRAB.gen
FortinetW32/Kryptik.GLKY!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.GandCrab.HwoCEpsA

How to remove Generic.BrResMon.1.A7C5220D?

Generic.BrResMon.1.A7C5220D removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment