What is "Johnnie.160580"? – Adware Reports

The Johnnie.160580 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Johnnie.160580 virus can do?

Executable code extraction
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Anomalous binary characteristics

Related domains:

www.59kks.com

tongji.heng6.com

How to determine Johnnie.160580?


File Info:
crc32: 51AC3612
md5: ea92e39b0e0edc4e3b979900dc1d5743
name: EA92E39B0E0EDC4E3B979900DC1D5743.mlw
sha1: 262730c53f6d01521de605c861fd561d46532f48
sha256: 1e569baae83d4a842ee3df2bb33dc0ef13bcf79ac70931559b02b07882044364
sha512: 0a7ad970e45012237eceafb2014610b991851efe899cae7824501b53d9ccc3ad94b33fa334d9bb3398a56340f6c407f7dd63e769ad945168822b19851143b9ef
ssdeep: 3072:upioYbp25PQqb2YE7KXpkIfqD5cZwPQXGoiC18/e:EFEEQqKYsKXpkF5mwPQXG88/
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0804 0x04b0
InternalName: B5
FileVersion: 14.04.0014
CompanyName: b130949
ProductName: x5de5x7a0b1
ProductVersion: 14.04.0014
OriginalFilename: B5.exe

Johnnie.160580 also known as:

Lionic	Trojan.Win32.Mone.4!c
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Johnnie.160580
Cylance	Unsafe
Zillya	Trojan.Mone.Win32.31
Sangfor	PUP.Win32.Johnnie.160580
Alibaba	Trojan:Win32/Generic.31e847b5
Cybereason	malicious.b0e0ed
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Mone.ej
BitDefender	Gen:Variant.Johnnie.160580
NANO-Antivirus	Trojan.Win32.Mone.cwpbvs
MicroWorld-eScan	Gen:Variant.Johnnie.160580
Tencent	Win32.Trojan.Mone.Amlu
Ad-Aware	Gen:Variant.Johnnie.160580
Sophos	Mal/Generic-S
Comodo	Malware@#3060dqgdyhjpl
BitDefenderTheta	Gen:NN.ZevbaCO.34266.Qm0@aepA5Jpb
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Trojan.jm
FireEye	Gen:Variant.Johnnie.160580
Emsisoft	Gen:Variant.Johnnie.160580 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Mone.bw
Avira	TR/Graftor.4193.1
Antiy-AVL	Trojan/Generic.ASMalwS.2628B3E
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Johnnie.D27344
GData	Gen:Variant.Johnnie.160580
McAfee	Artemis!EA92E39B0E0E
MAX	malware (ai score=81)
VBA32	Trojan.Mone
Panda	Generic Malware
Yandex	Trojan.GenAsa!QfmljrqfseU
Ikarus	Trojan.Win32.Mone
Fortinet	W32/Mone.EJ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Johnnie.160580?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Johnnie.160580”?