Categories: Malware

Johnnie.320248 removal guide

The Johnnie.320248 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Johnnie.320248 virus can do?

At least one process apparently crashed during execution
Dynamic (imported) function loading detected
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Johnnie.320248?


File Info:
name: 91988B2A8756B993A341.mlwpath: /opt/CAPEv2/storage/binaries/428bcf12e5883a48e0a3056c9f4edd55f90f1a174fdead32a47d7677953eb3abcrc32: DD13951Cmd5: 91988b2a8756b993a341787a076762ccsha1: 124b8a2e6ce186e9b13710685c40275e09328b26sha256: 428bcf12e5883a48e0a3056c9f4edd55f90f1a174fdead32a47d7677953eb3absha512: b68c975d22d4906f7a22482427f4366049651c9533a2e506c04d87cfe4592a0bb1b29a43ecc0dde74f6a3c19fab768f125ed36c5555c428005f9fae7de59e976ssdeep: 6144:BS4TYAzd1s3LNW7jbqsDq9vv/d6S808WxvHqzgZ:BS4T9dQ2vqskvvISP8OvHZtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E054353DE3034415E719E7755B41EAF0C52A5D3A47A0F08FE76AB836683218F4A7326Esha3_384: 02afc6f3e76c5b37b299e5f4d3aba892d7ca8680f8e4f96110307ff8648752025c28af48484f7eee7deb730061396f4cep_bytes: 6a606848614000e880030000bf940000timestamp: 2012-05-12 09:40:35
Version Info:
0: [No Data]

Johnnie.320248 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Zbot.l!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Johnnie.320248
FireEye	Generic.mg.91988b2a8756b993
ALYac	Gen:Variant.Johnnie.320248
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Zbot.mt
K7AntiVirus	Spyware ( 004b92701 )
Alibaba	TrojanSpy:Win32/CeeInject.2b9132bb
K7GW	Spyware ( 004b92701 )
Cybereason	malicious.a8756b
BitDefenderTheta	Gen:NN.ZexaF.34212.sqX@aiGE!7ec
VirIT	Trojan.Win32.Winlock.JEU
Cyren	W32/CeeInject.AN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Spy.Zbot.AAQ
APEX	Malicious
ClamAV	Win.Trojan.Zbot-22675
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Johnnie.320248
NANO-Antivirus	Trojan.Win32.Zbot.riqdc
SUPERAntiSpyware	Trojan.Agent/Gen-Injector
Avast	Win32:Citadel [Trj]
Tencent	Malware.Win32.Gencirc.10c40460
Ad-Aware	Gen:Variant.Johnnie.320248
Emsisoft	Gen:Variant.Johnnie.320248 (B)
Comodo	TrojWare.Win32.Kryptik.ADEV@4p1shw
DrWeb	Trojan.Winlock.6208
Zillya	Trojan.Zbot.Win32.60824
TrendMicro	TROJ_AGENT_037645.TOMB
McAfee-GW-Edition	BehavesLike.Win32.ZBot.dh
Sophos	Mal/Generic-S
Ikarus	Trojan.SuspectCRC
GData	Gen:Variant.Johnnie.320248
Jiangmin	Trojan/JboxGeneric.dgh
Webroot	W32.Dropper.Gen
Avira	TR/Dropper.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Spy]/Win32.Zbot
Arcabit	Trojan.Johnnie.D4E2F8
ViRobot	Trojan.Win32.A.Zbot.299008.G
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	PWS:Win32/Zbot
Cynet	Malicious (score: 100)
AhnLab-V3	Spyware/Win32.Zbot.R26839
Acronis	suspicious
McAfee	PWS-Zbot.gen.bfo
VBA32	TrojanSpy.Zbot
Malwarebytes	Malware.AI.3818947484
TrendMicro-HouseCall	TROJ_AGENT_037645.TOMB
Rising	Spyware.Zbot!8.16B (CLOUD)
Yandex	Trojan.GenAsa!5taz3AaKsho
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Kryptik.AFVU!tr
AVG	Win32:Citadel [Trj]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_90% (D)
MaxSecure	Trojan.Malware.4002763.susgen