Johnnie.213992 (file analysis)

The Johnnie.213992 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Johnnie.213992 virus can do?

Executable code extraction
Creates RWX memory
A process created a hidden window
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Anomalous binary characteristics

How to determine Johnnie.213992?


File Info:
crc32: 67212223
md5: d1660d728670a5a1ba9abd27d1b10efb
name: 444444.png
sha1: 3a3186856b58ff64936731a3b4d67fc130bc2387
sha256: 44f58cdf2f8ab173527193e20a2f28774f0fbbd8d4ec18bab9cd1b566da07f39
sha512: 088006d5c6d3c5171ce8c5c5d0772852c1c3bb79bb98b760a5412e60eccb55d4fdf9c778ade96e1227b88691217134f81b8f7cbfa61977bf4230bf98aa652d93
ssdeep: 6144:IQcpFrLixBi25B9qO+IVqLlhce3i/FCm1Uu2:XcPrGxU25BlClhVm1R
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0407 0x04b0
InternalName: XP-Key-Reader
FileVersion: 2.06
CompanyName: DCS-Computer
ProductName: XP-Key-Reader
ProductVersion: 2.06
OriginalFilename: XP-Key-Reader.exe

Johnnie.213992 also known as:

MicroWorld-eScan	Gen:Variant.Johnnie.213992
FireEye	Generic.mg.d1660d728670a5a1
Qihoo-360	HEUR/QVM10.1.08B9.Malware.Gen
McAfee	GenericRXJH-SG!D1660D728670
Cylance	Unsafe
Sangfor	Malware
BitDefender	Gen:Variant.Johnnie.213992
Cybereason	malicious.56b58f
BitDefenderTheta	Gen:NN.ZexaF.34084.vq0@ayxhs@s
Cyren	W32/SillyBackdoor.B.gen!Eldorado
GData	Gen:Variant.Johnnie.213992
Rising	Trojan.Kryptik!8.8 (TFE:dGZlOgU3EyvyH9N6kQ)
Ad-Aware	Gen:Variant.Johnnie.213992
DrWeb	Trojan.Inject3.34299
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Fujacks.fc
SentinelOne	DFI – Malicious PE
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Johnnie.213992 (B)
APEX	Malicious
F-Prot	W32/SillyBackdoor.B.gen!Eldorado
Webroot	W32.Trojan.Gen
Endgame	malicious (high confidence)
Arcabit	Trojan.Johnnie.D343E8
Microsoft	Trojan:Win32/Wacatac.C!ml
Acronis	suspicious
MAX	malware (ai score=82)
ESET-NOD32	a variant of Win32/Kryptik.HAVP
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Kryptik.HAUL!tr
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Johnnie.213992?

Johnnie.213992 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X