Categories: Malware

Johnnie.376452 removal

The Johnnie.376452 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Johnnie.376452 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Drops a binary and executes it
Performs some HTTP requests
Uses Windows utilities for basic functionality
Attempts to modify desktop wallpaper
A process was set to shut the system down when terminated
Installs itself for autorun at Windows startup
Creates a hidden or system file

Related domains:

z.whorecord.xyz

a.tomx.xyz

edgedl.me.gvt1.com

How to determine Johnnie.376452?


File Info:
crc32: A6446EADmd5: c90aa735c0772a2ad0092c716046bbdfname: C90AA735C0772A2AD0092C716046BBDF.mlwsha1: 2faf819e2364b60def9ec4767d8fdbdce647b846sha256: ec7095eecee753f62023a27cf61c1da621ebc2c75be70c403788cb5429ebc06asha512: d6c8554f8425bbde68ad9647d4a49cd29b1ea8bf035f71f6f33af61bb57913009dcad9080a1bdc10391c4c078a26b18da5d90a53762d504887833c7209ce6c3dssdeep: 3072:K1I4KxtQ0zRagDudaeMC0WwGxfrCGPVHzzgd2HPVVf9AebuLFfK9s7IDNgDd96i:K1US2Fudaurrak9gorD6mi2type: PE32 executable (console) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Johnnie.376452 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.KillMBR.24848
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.DiskWriter
ALYac	Gen:Variant.Johnnie.376452
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/KillMBR.NDS
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Killmbr-7989846-0
Kaspersky	Trojan.Win32.DiskWriter.dqf
BitDefender	Gen:Variant.Johnnie.376452
MicroWorld-eScan	Gen:Variant.Johnnie.376452
Ad-Aware	Gen:Variant.Johnnie.376452
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34058.nuW@aaasgAmi
McAfee-GW-Edition	GenericRXPN-UH!C90AA735C077
FireEye	Generic.mg.c90aa735c0772a2a
Emsisoft	Gen:Variant.Johnnie.376452 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1116853
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Johnnie.D5BE84
ZoneAlarm	HEUR:Trojan.Win32.KillMBR.gen
GData	Gen:Variant.Johnnie.376452
McAfee	GenericRXPN-UH!C90AA735C077
MAX	malware (ai score=87)
VBA32	BScope.Trojan.MSIL.SchoolGirl
Malwarebytes	Malware.AI.1345464204
Ikarus	Trojan.Win32.KillMBR
AVG	Win32:Malware-gen
Qihoo-360	Win32/Ransom.DiskWriter.HgIASaAA