Johnnie.98687 (file analysis)

The Johnnie.98687 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Johnnie.98687 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Johnnie.98687?


File Info:
crc32: BC47BA0E
md5: 059b2876fa9274a7fbc4fc98ebf5f55c
name: 059B2876FA9274A7FBC4FC98EBF5F55C.mlw
sha1: 5fc0a4af8cb40d2126c8f94f6a924a1d501a00aa
sha256: 24a2a4fe9f77a6dc21c8dbc2f52c5b677b73aaa2ed29189b4b9d5bb544dcce00
sha512: 6452d1a1c425528b99fe45c739be3f6ebc3849cf401394ec1ba04fd5f2f2528c3162b3253da6c42bb8ca7530caaf79bb4bab2a5c7868b177de736df0adb6fa99
ssdeep: 24576:MEFsPCLyc0lA5otGYTmQkQCxHBBzSmpj6Z6TWCQJZ0w+FmV8TCdA8Wo3:FCP1hUotG6Cxh5nOuWp+68TCdF3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Copyright 1997-present, Guidance Software, Inc. All Rights Reserved
FileVersion: 7.13.0.11
CompanyName: Guidance Software
ProductName: EnCase Node Setup
Build Identifier: qaau0000245E 06/24/16 12:26:34 PM
ProductVersion: 7.13
FileDescription: EnCase Node Setup
Platform: x86
Translation: 0x0409 0x04e4

Johnnie.98687 also known as:

K7AntiVirus	Trojan ( 0056e9231 )
Lionic	Trojan.Win32.Johnnie.4!c
DrWeb	Trojan.MulDrop6.21634
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.GenericPMF.S5233215
ALYac	Gen:Variant.Johnnie.98687
Cylance	Unsafe
Zillya	Trojan.Black.Win32.53727
Sangfor	Trojan.Win32.Occamy.C24
K7GW	Trojan ( 0056e9231 )
Cybereason	malicious.6fa927
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Johnnie.98687
NANO-Antivirus	Trojan.Win32.Drop.eltujm
MicroWorld-eScan	Gen:Variant.Johnnie.98687
Tencent	Malware.Win32.Gencirc.11491b57
Ad-Aware	Gen:Variant.Johnnie.98687
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Gen:Variant.Johnnie.98687
Emsisoft	Gen:Variant.Johnnie.98687 (B)
Avira	HEUR/AGEN.1127957
Antiy-AVL	Trojan/Generic.ASMalwS.2638AE0
Microsoft	Trojan:Win32/Occamy.C24
Arcabit	Trojan.Johnnie.D1817F
GData	Gen:Variant.Johnnie.98687
McAfee	Artemis!059B2876FA92
VBA32	Trojan.MulDrop
Malwarebytes	Adware.IStartSurf
TrendMicro-HouseCall	TROJ_GEN.R002H0CJO21
Yandex	Trojan.GenAsa!6T2xTYeekDs
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Johnnie.98687?

Johnnie.98687 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X