Malware

Should I remove “Johnnie.94365”?

Malware Removal

The Johnnie.94365 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Johnnie.94365 virus can do?

  • Executable code extraction
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
api.uf1.cn
a.tomx.xyz

How to determine Johnnie.94365?


File Info:

crc32: 17387EFB
md5: 3b7e47f942ab1f5d4186cf8082bce98e
name: t03.exe
sha1: c6e1259aa41f7be45f0a98ec79a5a469c25ff848
sha256: bcc005b0317fd3aad73f1654769953f78d52f280f5711dc887106374b94952e7
sha512: f8d8ec542bf56478ca3a1a757f55b501e840777e3c5e344407b8ebe06ff9c8240675dea3b7c34d17a5c875bf343ad868024f17dc6b13004a66e343ccc33b5f93
ssdeep: 24576:0HPS4CrMIL/KDye9jYOJPU+SyDnTnbd9BJZKfT1NMLMVpk/oUUj5pwc3c:0mrMIbKDye9jYOJPU+SyDLbxJZKfk6mL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

FileVersion: 5.9.8.10907
ProductVersion: 5.9
Translation: 0x0804 0x04b0

Johnnie.94365 also known as:

MicroWorld-eScanGen:Variant.Johnnie.94365
FireEyeGeneric.mg.3b7e47f942ab1f5d
ALYacGen:Variant.Johnnie.94365
ZillyaTrojan.Miner.Win32.5421
BitDefenderGen:Variant.Johnnie.94365
Cybereasonmalicious.942ab1
Invinceaheuristic
SymantecML.Attribute.HighConfidence
APEXMalicious
ClamAVWin.Malware.Mikey-6986881-0
GDataGen:Variant.Johnnie.94365
NANO-AntivirusTrojan.Win32.Johnnie.gggyda
Endgamemalicious (high confidence)
EmsisoftGen:Variant.Johnnie.94365 (B)
ComodoTrojWare.Win32.Eqtonex.B@83htfq
F-SecureHeuristic.HEUR/AGEN.1019063
DrWebTrojan.MulDrop11.27235
AviraHEUR/AGEN.1019063
eGambitUnsafe.AI_Score_96%
ArcabitTrojan.Johnnie.D1709D
MicrosoftTrojan:Win32/Wacatac.B!ml
Acronissuspicious
VBA32Trojan.MulDrop
MAXmalware (ai score=81)
Ad-AwareGen:Variant.Johnnie.94365
MalwarebytesPUP.Optional.ChinAd
YandexTrojan.Reincarnation!
BitDefenderThetaGen:NN.ZexaF.33558.cmGfaCBZibgi
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Generic/Trojan.21a

How to remove Johnnie.94365?

Johnnie.94365 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment