Categories: Malware

Should I remove “Johnnie.928”?

The Johnnie.928 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Johnnie.928 virus can do?

Presents an Authenticode digital signature
A process attempted to delay the analysis task.
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Queries information on disks, possibly for anti-virtualization
Attempts to modify proxy settings

Related domains:

css.jipinfeiche.cn

How to determine Johnnie.928?


File Info:
crc32: 368C9203md5: 6de046135e558f84a4edc6596822948fname: meinvcanting2.exesha1: 04fbdc102e61e40350a4a0cdf72cef86826fe12esha256: fc182c219076d135bd532926c8a9ee0ccd928137e2c41ff71881b0dc9ee6014asha512: 29d93e17f53e208dcb6dce59242aa9ffb5ee616c546668e64a50c7f7401c231b2e73c707db41d829f70765e09c9540d47fcbd0096c391b8cb7cc3ed1e523aa64ssdeep: 393216:8hoKnk/2QrKNEwNEPtlzhoKnk/2QrKNEwNEPtxIJaQPMaocwKvaAr7PrMrbKgLOx:X6I/kyhibKQ16type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2015InternalName: x6e38x620fx5b89x88c5x7a0bx5e8fFileVersion: 1, 0, 0, 2ProductName: x6e38x620fx5b89x88c5x7a0bx5e8fProductVersion: 1, 0, 0, 2FileDescription: x6e38x620fx5b89x88c5x7a0bx5e8fOriginalFilename: setup.exeTranslation: 0x0804 0x04b0

Johnnie.928 also known as:

Bkav	W32.HfsAdware.A41A
DrWeb	Trojan.DownLoader13.37290
MicroWorld-eScan	Gen:Variant.Johnnie.928
FireEye	Generic.mg.6de046135e558f84
CAT-QuickHeal	Trojan.MauvaiseRI.S5243382
McAfee	PUP-XBB-XG
Malwarebytes	Adware.Kuaiba
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Adware ( 004b87351 )
BitDefender	Gen:Variant.Johnnie.928
K7GW	Adware ( 004b87351 )
Cybereason	malicious.35e558
TrendMicro	HT_KUAIBA_GB100044.UVPM
Symantec	Trojan.Gen.2
GData	Gen:Variant.Johnnie.928
Kaspersky	not-a-virus:AdWare.Win32.Kuaiba.bsi
Alibaba	AdWare:Win32/Kuaiba.8b0fd1e8
NANO-Antivirus	Trojan.Win32.Dwn.duhexf
AegisLab	Riskware.Win32.Generic.1!c
Rising	Trojan.Generic@ML.87 (RDMK:jBHX2OnOUHA2U82wE4uTjA)
Ad-Aware	Gen:Variant.Johnnie.928
Sophos	Generic PUA KH (PUA)
Comodo	Malware@#16aq0cjqtwqhg
F-Secure	Heuristic.HEUR/AGEN.1019512
Baidu	Win32.Adware.kuaiba.a
Zillya	Adware.KuaibaCRTD.Win32.436
Invincea	heuristic
McAfee-GW-Edition	PUP-XBB-XG
Emsisoft	Gen:Variant.Johnnie.928 (B)
Webroot	W32.Adware.Gen
Avira	HEUR/AGEN.1019512
Endgame	malicious (high confidence)
Arcabit	Trojan.Johnnie.928
ZoneAlarm	not-a-virus:AdWare.Win32.Kuaiba.bsi
Microsoft	PUA:Win32/Kuaiba
AhnLab-V3	PUP/Win32.Helper.R233143
Acronis	suspicious
VBA32	AdWare.Agent
ALYac	Gen:Variant.Johnnie.928
MAX	malware (ai score=99)
ESET-NOD32	a variant of Win32/Adware.Kuaiba.A
TrendMicro-HouseCall	HT_KUAIBA_GB100044.UVPM
Tencent	Malware.Win32.Gencirc.10b3d2b4
Yandex	PUA.Kuaiba!
Ikarus	PUA.Kuaiba
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/StartPage.CK!tr
AVG	Win32:AdwareX-gen [Adw]
Avast	Win32:AdwareX-gen [Adw]
Qihoo-360	Win32/Trojan.Adware.37e