What is “Johnnie.311386 (B)”?

The Johnnie.311386 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Johnnie.311386 (B) virus can do?

Network activity detected but not expressed in API logs

How to determine Johnnie.311386 (B)?


File Info:
crc32: EB534316
md5: f100a1a223fa228277e653e0b9ed5811
name: F100A1A223FA228277E653E0B9ED5811.mlw
sha1: 3b38cfa9a7ad94bdb108c7e641b9bb63854aa9f0
sha256: 75b668aaf302d0d92ab5618cceb02e2c281cba3686db5ee0b90f474dcb0d50aa
sha512: 33a621bb924839263f11c1fbc3b34137af874b8c89f4efa8a0bffc6c31af6c9001bfd3f21879e3c5135fd43360ff9010566fa19ebf4936491a1ea295a9eee5dc
ssdeep: 3072:dm5az4s1umSAxcaQrBw6h6UOQUngn0i7L15il28uoZ1s6KAQxdbVrn87c+3nVcXM:DZ1uIfMBlYHngn0ML1alVM2RZ
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: KaptanS2.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: KaptanS2
ProductVersion: 1.0.0.0
FileDescription: KaptanS2
OriginalFilename: KaptanS2.exe

Johnnie.311386 (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Johnnie.311386
FireEye	Generic.mg.f100a1a223fa2282
McAfee	RDN/Generic.dx
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Johnnie.311386
Cybereason	malicious.223fa2
BitDefenderTheta	Gen:NN.ZemsilF.34590.nm2@ayPZo8e
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	MSIL:GenMalicious-BF [Trj]
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:MSIL/Kryptik.2dbfa7e5
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ad-Aware	Gen:Variant.Johnnie.311386
Emsisoft	Gen:Variant.Johnnie.311386 (B)
F-Secure	Trojan.TR/ATRAPS.Gen
McAfee-GW-Edition	Artemis!Trojan
Sophos	ML/PE-A
Ikarus	Trojan.MSIL.CryptoObfuscator
Avira	TR/ATRAPS.Gen
Microsoft	Backdoor:Win32/Bladabindi!ml
Arcabit	Trojan.Johnnie.D4C05A
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Johnnie.311386
Cynet	Malicious (score: 90)
AhnLab-V3	Malware/Win32.RL_Generic.C4345714
ALYac	Gen:Variant.Johnnie.311386
MAX	malware (ai score=89)
Malwarebytes	Backdoor.Bladabindi
ESET-NOD32	a variant of MSIL/Kryptik.IRC
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Kryptik.IRC!tr
AVG	MSIL:GenMalicious-BF [Trj]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	HEUR/QVM03.0.8A54.Malware.Gen

How to remove Johnnie.311386 (B)?

Johnnie.311386 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X