Categories: Malware

Should I remove “Johnnie.299020”?

The Johnnie.299020 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Johnnie.299020 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

edgedl.me.gvt1.com

How to determine Johnnie.299020?


File Info:
crc32: 788069E2md5: 274ff9a5a2e1fb10fa67846dd3e62774name: 274FF9A5A2E1FB10FA67846DD3E62774.mlwsha1: 16cc00fb105d9dccf59d58b83afaf77996ee0766sha256: 7928fb0bd83d9f0a65e8f3a5c5c262a10eeb2cd5306fd7ed35dbfdbb3042685esha512: 1e85e47a4e14f32131f705c905f7b6cadbfeb6faa379e6941741516bb71789bc3ea49c1b5eb9716599a9b4b31178988b5596ba2db1a967634c46d60a4cc6f9bessdeep: 6144:IsYj6b2J8dOJ5F6taJ6OiYvRhWC1OhMrccQubGad6BRk:ojcdbQJ6OiYvmCMUc7uyFRktype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
0: [No Data]

Johnnie.299020 also known as:

K7AntiVirus	Trojan ( 004cecf51 )
Lionic	Adware.JS.Agent.2!c
Elastic	malicious (high confidence)
DrWeb	Trojan.BPlug.1022
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.433418
Cylance	Unsafe
Zillya	Trojan.ExtenBro.Win32.64628
Sangfor	Trojan.Win32.Generic.rg
CrowdStrike	win/malicious_confidence_70% (D)
Alibaba	AdWare:Win32/ExtenBro.33498503
K7GW	Trojan ( 004cecf51 )
Cybereason	malicious.5a2e1f
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	not-a-virus:UDS:AdWare.JS.Agent.et
BitDefender	Gen:Variant.Johnnie.299020
NANO-Antivirus	Trojan.Win32.ExtendBro.dxjgsm
ViRobot	Trojan.Win32.Z.Extenbro.350234
MicroWorld-eScan	Gen:Variant.Johnnie.299020
Tencent	Win32.Trojan.Extenbro.Hqcd
Sophos	Mal/Generic-S
Comodo	Malware@#2fag56cawpclt
BitDefenderTheta	Gen:NN.ZedlaF.34170.gu4@aO6mjVfi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
FireEye	Gen:Variant.Johnnie.299020
Emsisoft	Gen:Variant.Johnnie.299020 (B)
Jiangmin	Trojan/ExtenBro.lf
Avira	HEUR/AGEN.1124323
eGambit	Generic.Malware
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Johnnie.D4900C
GData	Gen:Variant.Bulz.433418
AhnLab-V3	PUP/Win32.Helper.R161101
McAfee	Artemis!274FF9A5A2E1
MAX	malware (ai score=83)
VBA32	Trojan.ExtenBro
Malwarebytes	Malware.AI.3604868526
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PIT21
Rising	Trojan.Generic@ML.81 (RDML:XU4t/mxlNTXnD+leupDRDg)
Yandex	Trojan.ExtenBro!a4JLI/BSQhM
SentinelOne	Static AI – Malicious PE
Fortinet	W32/ExtenBro.BP!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml