Malware

How to remove “Johnnie.137915”?

Malware Removal

The Johnnie.137915 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Johnnie.137915 virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Johnnie.137915?


File Info:

crc32: 476F8309
md5: f1e910f59ba192a8986871b483bbd7bb
name: F1E910F59BA192A8986871B483BBD7BB.mlw
sha1: 73531af9d7ec408a457dde5bc7f1692eed590d90
sha256: 9fa4e6992327b1d3ca38186d592a8124c5e923b4f8c043f8ffda50272875efca
sha512: dbdc4bdff9586f8a2e673b9d42d134f23404e70ef274ab522e930e63d720fa389ad5a4124c20d1a286d758bfc8ed1cd358b0ddb1ac4d12a9368fb38a66bcaf3e
ssdeep: 768:SChFyjD0wBP7ToMM/GIQWUPcnD3vUDeo3RkmBiuYX:SC3oQD3vUDeCkmBZYX
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.6116.16928
InternalName: arsobk1.exe
FileVersion: 1.0.6116.16928
ProductVersion: 1.0.6116.16928
FileDescription:
OriginalFilename: arsobk1.exe

Johnnie.137915 also known as:

LionicTrojan.Win32.Johnnie.4!c
ALYacGen:Variant.Johnnie.137915
CylanceUnsafe
SangforTrojan.Win32.Zpevdo.B
BitDefenderGen:Variant.Johnnie.137915
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
SymantecTrojan.Gen.2
MicroWorld-eScanGen:Variant.Johnnie.137915
Ad-AwareGen:Variant.Johnnie.137915
SophosMal/Generic-S
McAfee-GW-EditionGenericRXIX-DX!F1E910F59BA1
FireEyeGen:Variant.Johnnie.137915
EmsisoftGen:Variant.Johnnie.137915 (B)
MicrosoftProgram:Win32/Wacapew.C!ml
GDataGen:Variant.Johnnie.137915
AhnLab-V3Malware/Win32.RL_Generic.C3555430
McAfeeGenericRXIX-DX!F1E910F59BA1
MAXmalware (ai score=87)
MalwarebytesMachineLearning/Anomalous.100%
IkarusTrojan-Ransom.Blocker
MaxSecureTrojan.Malware.102877536.susgen
Qihoo-360Generic/Trojan.Generic.HgAASRIA

How to remove Johnnie.137915?

Johnnie.137915 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment