Johnnie.99287 removal guide

The Johnnie.99287 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Johnnie.99287 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Uses Windows utilities for basic functionality
• CAPE extracted potentially suspicious content
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Attempts to modify proxy settings
• Touches a file containing cookies, possibly for information gathering
• Collects information to fingerprint the system
• Anomalous binary characteristics
• Uses suspicious command line tools or Windows utilities
• Yara detections observed in process dumps, payloads or dropped files

How to determine Johnnie.99287?

File Info:
name: 6C2D2644268FA873AE4D.mlw
path: /opt/CAPEv2/storage/binaries/1f89009799a677668e786d6a7dcde2314181997aaf1cfe5260b2302d47e156c9
crc32: 057B63F9
md5: 6c2d2644268fa873ae4d8a5d17debc69
sha1: 8ee0487816d450f012fe2266b6bcdb3573b7e1c5
sha256: 1f89009799a677668e786d6a7dcde2314181997aaf1cfe5260b2302d47e156c9
sha512: cd5a19591c813ebc679f29782dc87fcf13689e2bd9a96833533760483e4889011f33a70071edd12f7f88c726f8783670777d0ff9b87561106f2da8592dc93e4a
ssdeep: 24576:Wxc8mNvcBMsiAka7HYB2oMixJnbnUQ7goJ1h+l6UHu/fJBxtimkv:WSZEO2k4oMmb7x1h+l6Z/9tiJv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EE653330DB18C7A7EA2BDB7B9DF2414E505260158B5B1EF322C032461EEFE74869B51E
sha3_384: 58884f841e93b3f06a38ab9cae2a328c5fc155bd94cbd576d12f430fac1922e6321a858ea5a7fd19529d66545c1d251c
ep_bytes: b8f05b58005064ff3500000000648925
timestamp: 2011-04-21 09:28:17

Version Info:
CompanyName:      
ProductName: 1
FileVersion: 1
ProductVersion: 1
InternalName: 1
OriginalFilename: 1.exe
Translation: 0x0804 0x04b0

Johnnie.99287 also known as:

How to remove Johnnie.99287?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.