Johnnie.292389 removal tips

The Johnnie.292389 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Johnnie.292389 virus can do?

Executable code extraction
Creates RWX memory
Attempts to execute a powershell command with suspicious parameter/s
A process created a hidden window
A scripting utility was executed
Writes a potential ransom message to disk
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Johnnie.292389?


File Info:
crc32: 4D961A05
md5: 76f547c793b5478b970c64caf04d01d4
name: 76F547C793B5478B970C64CAF04D01D4.mlw
sha1: f9eb40f6d3d4c83852e3781886db762bef8564e0
sha256: e7c277aae66085f1e0c4789fe51cac50e3ea86d79c8a242ffc066ed0b0548037
sha512: 91e91a8b693cb253f281411260611a221a113b342eaa642a9d6597aaf86c138ee2aa28ade10218a814ae34016e6d70824e36786497476ab704defddf60e33e17
ssdeep: 6144:Q5fW8eILySdSS4JoHjnJVZJQQIreKsuKu3a2WQe0gz+Y:OeILzSS5jnJ/JTu3zWtqY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: QuantumQuditSimulator
FileVersion: 1.0.0.42
CompanyName: Damo Inc
ProductName: Quantum Qudit Simulator
ProductVersion: 1.0.0.42
OriginalFilename: QuantumQuditSimulator.exe

Johnnie.292389 also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Gen:Variant.Johnnie.292389
CAT-QuickHeal	Trojan.Vebzenpak
McAfee	Artemis!76F547C793B5
Cylance	Unsafe
K7AntiVirus	Trojan ( 005735561 )
BitDefender	Gen:Variant.Johnnie.292389
K7GW	Trojan ( 005735561 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Johnnie.D47625
TrendMicro	TROJ_GEN.R002C0DKI20
BitDefenderTheta	Gen:NN.ZevbaF.34634.Hm0@ay9Vfvai
Cyren	W32/Trojan.XEQU-1929
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Johnnie-9797515-0
Kaspersky	Trojan.Win32.Vebzenpak.abxn
Alibaba	Trojan:Win32/Vebzenpak.ac5e1d02
ViRobot	Trojan.Win32.S.MountLocker.544768
Ad-Aware	Gen:Variant.Johnnie.292389
Emsisoft	Gen:Variant.Johnnie.292389 (B)
Comodo	Malware@#2jsh0lk8b55tb
F-Secure	Trojan.TR/Kryptik.ofwjj
DrWeb	Trojan.Encoder.33163
VIPRE	Trojan.Win32.Generic!BT
Invincea	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Trojan.hh
FireEye	Generic.mg.76f547c793b5478b
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.109696731.susgen
Avira	TR/Kryptik.ofwjj
Kingsoft	Win32.Troj.Vebzenpak.ab.(kcloud)
Gridinsoft	Trojan.Win32.Kryptik.oa
Microsoft	Trojan:Win32/Skeeyah!MSR
AegisLab	Trojan.Win32.Vebzenpak.4!c
ZoneAlarm	Trojan.Win32.Vebzenpak.abxn
GData	Gen:Variant.Johnnie.292389
Cynet	Malicious (score: 100)
ESET-NOD32	a variant of Win32/GenKryptik.EWOG
ALYac	Trojan.Ransom.Filecoder
MAX	malware (ai score=100)
Malwarebytes	Ransom.FileCryptor
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DKI20
Tencent	Malware.Win32.Gencirc.11b16bb8
Ikarus	Trojan.Win32.Krypt
Fortinet	W32/Vebzenpak.ABXN!tr
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
Qihoo-360	Win32/Trojan.d61

How to remove Johnnie.292389?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Johnnie.292389 removal tips