Should I remove “Johnnie.261330 (B)”?

The Johnnie.261330 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Johnnie.261330 (B) virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Johnnie.261330 (B)?


File Info:
name: 79961A81DE3C38870B5F.mlw
path: /opt/CAPEv2/storage/binaries/357029f14d02fd829c8adaa0d73761e97df6d0ab4c195179b79afaf7a20b7aa6
crc32: EA19A091
md5: 79961a81de3c38870b5f499a7a7a5941
sha1: c38580566a87c9d2957040d525def470d61e1449
sha256: 357029f14d02fd829c8adaa0d73761e97df6d0ab4c195179b79afaf7a20b7aa6
sha512: 254cb1ce0bde491e7dbf9d71ed7e81514468fec8477195a1ed3d299c8aa5df4c072cf94aec9dcb1b7d911f9e459cffd39af151d09fe2c50b019591d1539a1815
ssdeep: 384:t5uyeFbjKhXAxpb69L44hkLmz3LWaN7hGw0JpLKLHoiMuHjfr9K:rsvGZ4RmnXGtW1HLr9K
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T199824B897BE89A3DDBFE0A750DB352204770D2179952E74F1DC8609A0F233C48B92EE5
sha3_384: 858b730c7684779a4113074b0679cec8ad9897ab475fba61d52f8434d80eaf6817babf9f77afb267746a30fa4bb881cc
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2048-07-03 06:15:43

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: WindowsFormsApp1
FileVersion: 1.0.0.0
InternalName: WindowsFormsApp1.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: WindowsFormsApp1.exe
ProductName: WindowsFormsApp1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Johnnie.261330 (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Johnnie.261330
FireEye	Generic.mg.79961a81de3c3887
McAfee	Artemis!79961A81DE3C
K7AntiVirus	Trojan ( 0051c6271 )
K7GW	Trojan ( 0051c6271 )
CrowdStrike	win/malicious_confidence_90% (W)
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/Agent.BEW
APEX	Malicious
ClamAV	Win.Trojan.RevengeRat-6344273-0
Kaspersky	HEUR:Backdoor.MSIL.Revenge.gen
BitDefender	Gen:Variant.Johnnie.261330
Avast	Win64:BackdoorX-gen [Trj]
Ad-Aware	Gen:Variant.Johnnie.261330
Emsisoft	Gen:Variant.Johnnie.261330 (B)
DrWeb	BackDoor.RevetratNET.1
TrendMicro	TROJ_GEN.R014C0WL621
McAfee-GW-Edition	Artemis
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Agent
GData	Gen:Variant.Johnnie.261330
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
MAX	malware (ai score=83)
TrendMicro-HouseCall	TROJ_GEN.R014C0WL621
Rising	Backdoor.Revetrat!1.C8D4 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.BEW!tr
AVG	Win64:BackdoorX-gen [Trj]
Cybereason	malicious.1de3c3

How to remove Johnnie.261330 (B)?

Johnnie.261330 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X