Johnnie.185807 removal

The Johnnie.185807 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Johnnie.185807 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Johnnie.185807?


File Info:
crc32: 00B1FB06
md5: 743c76b393ece041b684c8242b188ccf
name: 743C76B393ECE041B684C8242B188CCF.mlw
sha1: 0d5ae2b914873e5611a8aaba7ffcfd3f523708a7
sha256: ec3123969e1b3c19763f7a9825db8c8c133c25539bba399e6c20cf80d29d3ee6
sha512: a5453a2e80d2e3aa9c09cebd6a5772f239abcc42f3c268d67d817bc20a2b7437e3fc792d7f6a4f23fbaabd3bf2bb62607d5a4dbf115afb175b80c0f9cb304a2c
ssdeep: 192:3biJ1hpDRqz/fxv1MzKOlxaNbr2/1Mhsv87hwsnY:EtWB15KxaNb6G487ah
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 1.0.0.0
InternalName: ruby.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: diamond
ProductVersion: 1.0.0.0
FileDescription: diamond
OriginalFilename: ruby.exe

Johnnie.185807 also known as:

K7AntiVirus	Trojan ( 700000121 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Hosts.46562
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	Gen:Variant.Johnnie.185807
Cylance	Unsafe
K7GW	Trojan ( 700000121 )
Cybereason	malicious.393ece
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Filecoder.UH
APEX	Malicious
Avast	Win32:RansomX-gen [Ransom]
BitDefender	Gen:Variant.Johnnie.185807
MicroWorld-eScan	Gen:Variant.Johnnie.185807
Tencent	Malware.Win32.Gencirc.10b8fdc5
Ad-Aware	Gen:Variant.Johnnie.185807
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34050.am1@aep5voi
TrendMicro	Trojan.MSIL.TEIKA.SMTH
FireEye	Generic.mg.743c76b393ece041
Emsisoft	Gen:Variant.Johnnie.185807 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.ovnx
Webroot	W32.Adware.Gen
Avira	HEUR/AGEN.1131332
Antiy-AVL	Trojan/Generic.ASMalwS.2C53BBB
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Johnnie.185807
AhnLab-V3	Malware/Win32.RL_Trojan.C3454215
MAX	malware (ai score=84)
VBA32	TScope.Trojan.MSIL
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.MSIL.TEIKA.SMTH
Yandex	Trojan.Filecoder!wRa1hN7UxsA
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	W32/Filecoder.UH!tr
AVG	Win32:RansomX-gen [Ransom]

How to remove Johnnie.185807?

Johnnie.185807 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X