Johnnie.101217 removal

The Johnnie.101217 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Johnnie.101217 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Johnnie.101217?


File Info:
crc32: F282E1F9
md5: 61224fa5e849fca25b75955d418774fa
name: 61224FA5E849FCA25B75955D418774FA.mlw
sha1: 62e53eb4fc1b14c6df0e9764868df30bd63a1c48
sha256: b335695f47e56c587ee22ac70dedbf7a44ba1873adcbac15cab410da6063bd7e
sha512: 61c335934839be8fe8a57aa334ad5d9bfc6ac79931f6f728919d38d07bc0a1fbebbfc8984557f89479ca0867a06eeac4ea83e2a6699e797e052c646f6310f5c4
ssdeep: 12288:ZSXPoeypV8DHhwtWRm1zyc94EFnLjBavuug59Z62t2Uypfqg3HAHFie+ix7gY:6VKV82QIzH2Gjw2xS2EUyp10FukgY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (c)
InternalName: DispformDecades
FileVersion: 4.8.6.3
CompanyName: Incomedia s.r.l.
PrivateBuild: 4.8.6.3
LegalTrademarks: Copyright (c)
Comments: Midsize Subwoofer
ProductName: DispformDecades
Languages: English
ProductVersion: 4.8.6.3
FileDescription: Midsize Subwoofer
OriginalFilename: DispformDecades
Translation: 0x0409 0x04b0

Johnnie.101217 also known as:

K7AntiVirus	Trojan ( 00532e131 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Johnnie.101217
Zillya	Trojan.Foreign.Win32.58210
Sangfor	Trojan.Win32.Save.a
Alibaba	Ransom:Win32/Foreign.ef819e0c
K7GW	Trojan ( 00532e131 )
Cybereason	malicious.5e849f
Symantec	Trojan Horse
ESET-NOD32	a variant of Win32/Kryptik.GHOX
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Foreign.oaau
BitDefender	Gen:Variant.Johnnie.101217
NANO-Antivirus	Trojan.Win32.Johnnie.fddvep
MicroWorld-eScan	Gen:Variant.Johnnie.101217
Tencent	Win32.Trojan.Foreign.Wkvi
Ad-Aware	Gen:Variant.Johnnie.101217
Sophos	Mal/Generic-S
Comodo	Malware@#217tcunhp29g3
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TSPY_HPURSNIF.SMZD2
McAfee-GW-Edition	BehavesLike.Win32.Worm.dc
FireEye	Generic.mg.61224fa5e849fca2
Emsisoft	Gen:Variant.Johnnie.101217 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1109230
Antiy-AVL	Trojan/Generic.ASMalwS.26386D9
Microsoft	Trojan:Win32/Occamy.B
AegisLab	Trojan.Win32.Foreign.4!c
GData	Gen:Variant.Johnnie.101217
AhnLab-V3	Malware/Win32.Generic.C2545450
Acronis	suspicious
McAfee	Generic.dva
MAX	malware (ai score=95)
VBA32	BScope.Trojan.Yakes
Malwarebytes	MachineLearning/Anomalous.100%
Panda	Trj/CI.A
TrendMicro-HouseCall	TSPY_HPURSNIF.SMZD2
Yandex	Trojan.Foreign!BNusWdgQVm4
Ikarus	Trojan-Ransom.GandCrab
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Foreign.OAAU!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Foreign.HgIASSUA

How to remove Johnnie.101217?

Johnnie.101217 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X