Johnnie.215970 (B) (file analysis)

The Johnnie.215970 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Johnnie.215970 (B) virus can do?

• Executable code extraction
• Unconventionial language used in binary resources: Korean
• Network activity detected but not expressed in API logs

How to determine Johnnie.215970 (B)?

File Info:
crc32: A527081F
md5: 5dfb6c93e4e85de9dc5895250bca0d65
name: hByEntry.exe
sha1: a78416c25b8ffa04ecd81c332f437a4301ea134c
sha256: 26ae6343dff5267deff19337aa4c5fdc43d3e4e3ec2c32202d6f8c137f7f3f72
sha512: 9cb7fa7b35bc3866d1a7e6f5337f83f08b43a3b6ce6fb206cc36c666e16eccadfa03721bb9ba3b1c39af9e448b1686c0c337b7519e26f4f9f53adae207f98f85
ssdeep: 98304:lvyyvR7hAW7Q9Xr9qykVCmsKjVyEqDywtpKHRvM:zQ9Xr9qykVCmsKjVyEqDywtpKHRv
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0412 0x04b0
LegalCopyright: ClikSoft Co.,Ltd
InternalName: hByEntry
FileVersion: 1.00
CompanyName: xd074xb9adxc18cxd504xd2b8(xc8fc)
LegalTrademarks: xd55cxc758xd074xb9ad
ProductName: xd55cxc758xd074xb9ad
ProductVersion: 1.00
FileDescription: xd55cxbc29xbcd1xb3d9xb4f1xb85d
OriginalFilename: hByEntry.exe

Johnnie.215970 (B) also known as:

How to remove Johnnie.215970 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.