Malware

Johnnie.219172 removal tips

Malware Removal

The Johnnie.219172 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Johnnie.219172 virus can do?

  • Executable code extraction
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Johnnie.219172?


File Info:

crc32: E439F4B4
md5: 0f1360c82cc649bba284e8d2141a3fe7
name: 0F1360C82CC649BBA284E8D2141A3FE7.mlw
sha1: b70b8211bc6a76f7b28f9965832ea10b23cf29ec
sha256: 63372b0cb83a971493b45306bdc6a5e1412b805792221da8f2369103b9af1f54
sha512: ebf457e1622704244bcf6820ef5556baba2f367cfa3b0c570b5e08c29ba1d9bea273ab2cef64cee4df4b3df0107635ca77b626c9ed57407613abe105cbf853ad
ssdeep: 384:oQft+tmeAQY7ZZvCVU5KpltpV+Z/x1fbi6U16nCV2reU5/diRqLD3j42Snt+tm:oKc8QYFZotaZZlBIgrHFvU2Ec
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: pa
FileVersion: 1.00
CompanyName: iranianhackers
ProductName: Project1
ProductVersion: 1.00
OriginalFilename: pa.exe

Johnnie.219172 also known as:

BkavW32.AIDetect.malware2
DrWebTrojan.Siggen3.7265
CynetMalicious (score: 100)
ALYacGen:Variant.Johnnie.219172
CylanceUnsafe
ZillyaTrojan.DoubleEagle.Win32.35
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (W)
AlibabaRansom:Win32/DoubleEagle.5f84363c
Cybereasonmalicious.82cc64
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of NewHeur_VB_Trojan.22
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan-Ransom.Win32.DoubleEagle.fo
BitDefenderGen:Variant.Johnnie.219172
NANO-AntivirusTrojan.Win32.VB.gwmwv
ViRobotTrojan.Win32.A.DoubleEagle.36864
MicroWorld-eScanGen:Variant.Johnnie.219172
TencentWin32.Trojan.Doubleeagle.Gbr
Ad-AwareGen:Variant.Johnnie.219172
SophosMal/VB-F
ComodoSuspicious@#3qfxp1vgfwpmj
BitDefenderThetaAI:Packer.B72BBB111C
VIPRETrojan.Win32.Generic!BT
TrendMicroMal_Banld-5
McAfee-GW-EditionW32/Generic.v
FireEyeGeneric.mg.0f1360c82cc649bb
EmsisoftGen:Variant.Johnnie.219172 (B)
WebrootW32.Malware.Gen
AviraTR/VB.Downloader.Gen
eGambitGeneric.Worm
MicrosoftTrojan:Win32/Sisron
GDataGen:Variant.Johnnie.219172
McAfeeArtemis!0F1360C82CC6
MAXmalware (ai score=99)
VBA32Hoax.DoubleEagle
PandaGeneric Malware
TrendMicro-HouseCallMal_Banld-5
RisingRansom.DoubleEagle!8.49F3 (CLOUD)
YandexTrojan.VB!WgwNSA6XY/s
IkarusTrojan-Ransom.DoubleEagle
MaxSecureTrojan.Malware.2588.susgen
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Johnnie.219172?

Johnnie.219172 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment