Malware

Johnnie.312333 removal guide

Malware Removal

The Johnnie.312333 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Johnnie.312333 virus can do?

  • Executable code extraction
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Johnnie.312333?


File Info:

crc32: D6FE8D5A
md5: ec0e31185de3c1a82845a9cd8f82470f
name: EC0E31185DE3C1A82845A9CD8F82470F.mlw
sha1: 24c582ee495c1ab8957caeb00ee2becc6dbcbd8c
sha256: 490eab2e4eecc65631329de0a3d641ecdcb1ac73fa9482535cb4d5002f984df0
sha512: 5f1b936b9bb3b9005bc082e603ca72fa79b3a0bd3e17a48667ef50dcdb64ca8f4e5df6e005a1effda614f4ef9563bcbeacd01b91b562bb5089c684f5657ffc4d
ssdeep: 6144:gRlSNOXTQgpUBOw86/Ov5ZCNjC2RmGP+St3wHtE:gN8gp+Ow8RYC2RmGP+St3wS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0804 0x04b0
InternalName: START_hrd
FileVersion: 3.05.0002
CompanyName: x6df1x5733x5e02x65b9x76f4x79d1x6280x80a1x4efdx6709x9650x516cx53f8
ProductName: fCommon
ProductVersion: 3.05.0002
FileDescription: update
OriginalFilename: START_hrd.exe

Johnnie.312333 also known as:

BkavW32.AIDetect.malware1
DrWebTrojan.VbCrypt.250
MicroWorld-eScanGen:Variant.Johnnie.312333
McAfeeArtemis!EC0E31185DE3
CylanceUnsafe
SangforTrojan.Win32.Save.a
BitDefenderGen:Variant.Johnnie.312333
BitDefenderThetaGen:NN.ZevbaF.34590.Jq1@aiMJlNeb
APEXMalicious
AvastFileRepMalware
Ad-AwareGen:Variant.Johnnie.312333
EmsisoftGen:Variant.Johnnie.312333 (B)
F-SecureTrojan.TR/Dropper.Gen
McAfee-GW-EditionArtemis
FireEyeGeneric.mg.ec0e31185de3c1a8
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.Wacatac
MicrosoftProgram:Win32/Wacapew.C!ml
ArcabitTrojan.Johnnie.D4C40D
GDataWin32.Trojan.Patched.Y@susp
CynetMalicious (score: 85)
VBA32TScope.Trojan.VB
ALYacGen:Variant.Johnnie.312333
MAXmalware (ai score=83)
ESET-NOD32a variant of Win32/Patched.F potentially unsafe
SentinelOneStatic AI – Suspicious PE
FortinetRiskware/Patched
AVGFileRepMalware
CrowdStrikewin/malicious_confidence_80% (W)

How to remove Johnnie.312333?

Johnnie.312333 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment