Malware

Generic.BrResMon.1.FC1797C9 removal guide

Malware Removal

The Generic.BrResMon.1.FC1797C9 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Generic.BrResMon.1.FC1797C9 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Attempts to connect to a dead IP:Port (7 unique times)
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Faeroese
  • The binary likely contains encrypted or compressed data.
  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.billerimpex.com
billerimpex.com
www.macartegrise.eu
www.poketeg.com
perovaphoto.ru
asl-company.ru
www.fabbfoundation.gm
www.perfectfunnelblueprint.com
www.wash-wear.com
pp-panda74.ru
cevent.net
bellytobabyphotographyseattle.com
alem.be
apps.identrust.com
crl.identrust.com
x1.c.lencr.org
boatshowradio.com
dna-cp.com
acbt.fr
r3.o.lencr.org
wpakademi.com
www.cakav.hu
www.mimid.cz
6chen.cn
goodapd.website
oceanlinen.com
tommarmores.com.br
nesten.dk
zaeba.co.uk
www.n2plus.co.th
koloritplus.ru
h5s.vn
marketisleri.com
www.toflyaviacao.com.br
www.rment.in
www.lagouttedelixir.com
www.krishnagrp.com
big-game-fishing-croatia.hr
ocsp.digicert.com
mauricionacif.com
www.ismcrossconnect.com
aurumwedding.ru
test.theveeview.com
relectrica.com.mx
bethel.com.ve
vjccons.com.vn
bloghalm.eu
cyclevegas.com
royal.by
www.himmerlandgolf.dk
hoteltravel2018.com
picusglancus.pl
unnatimotors.in

How to determine Generic.BrResMon.1.FC1797C9?


File Info:

crc32: 79AAEEC5
md5: 6e06e255cd277b97f33f5de7390bbdd9
name: 6E06E255CD277B97F33F5DE7390BBDD9.mlw
sha1: d88d1482d1ac4e7ad708fce48041878ea21f4a58
sha256: 5917535f94f7289184d1a5ff090e74c58fee53b0271b404ec98be2e4dff9f7a7
sha512: 04e40ae265e6e5870b16a5f99b853e0d7d6ae6f8fa6e8a9ab90eea1b47eb12fad53dbecf6142cedc16a09a258b14f70bc7372225bc7c7f71cf5711f740ef3646
ssdeep: 3072:FWfMI5a7Uex2UrxaG5+6eo1wHLxY4G7wRhN/9OS0T63NqcGIDtwZXl31+TZ:FWRti2a53RsDdMS0T6kSpA+T
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.BrResMon.1.FC1797C9 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.GandCrypt.j!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.24300
CAT-QuickHealTrojan.Chapak.ZZ5
McAfeePacked-FKD!6E06E255CD27
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.139115
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Generic.7e1d7139
K7GWTrojan ( 655333331 )
K7AntiVirusTrojan ( 00532e3d1 )
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GJNN
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderDeepScan:Generic.BrResMon.1.FC1797C9
NANO-AntivirusTrojan.Win32.Kryptik.fgfwjr
ViRobotTrojan.Win32.R.Agent.203264.F
MicroWorld-eScanDeepScan:Generic.BrResMon.1.FC1797C9
TencentWin32.Trojan.Generic.Wozu
Ad-AwareDeepScan:Generic.BrResMon.1.FC1797C9
SophosMal/Generic-S
ComodoApplication.Win32.Dlhelper.GJ@8137f9
BitDefenderThetaGen:NN.ZexaF.34058.muW@aCbD5tmG
TrendMicroRansom.Win32.RYUK.SMB
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.6e06e255cd277b97
EmsisoftDeepScan:Generic.BrResMon.1.FC1797C9 (B)
SentinelOneStatic AI – Malicious PE
JiangminDownloader.Generic.ume
WebrootW32.Trojan.Gen
AviraTR/GandCrab.dcd
Antiy-AVLTrojan/Generic.ASMalwS.272C082
MicrosoftTrojan:Win32/RYUK.DSK!MTB
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataDeepScan:Generic.BrResMon.1.FC1797C9
AhnLab-V3Win-Trojan/Gandcrab04.Exp
Acronissuspicious
VBA32TrojanRansom.GandCrypt
MAXmalware (ai score=85)
MalwarebytesMalware.AI.2325033573
PandaTrj/CI.A
TrendMicro-HouseCallRansom.Win32.RYUK.SMB
RisingTrojan.Generic@ML.100 (RDML:vREpcvN4k2g0Pbb0fDb4pA)
YandexTrojan.GenAsa!+GPmIN++EW8
IkarusTrojan.Win32.Danabot
MaxSecureRansomeware.CRAB.gen
FortinetW32/Generic.AP.1D450C!tr
AVGFileRepMalware
Paloaltogeneric.ml
Qihoo-360Win32/Ransom.Ryuk.HwoCEpsA

How to remove Generic.BrResMon.1.FC1797C9?

Generic.BrResMon.1.FC1797C9 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment