In this article, I am going to detail how the Johnnie trojan injected right into your PC, and also the best way to remove Johnnie trojan virus.
What is Johnnie trojan?
| Name | Johnnie |
| Infection Type | Trojan |
| Symptoms |
|
| Similar behavior | InjectorCrypt, DiamondFox, MicroFake, Paneidix, Bohu, Kubik |
| Fix Tool |
See If Your System Has Been Affected by Johnnie trojan |
The name of this sort of malware is a reference to a well-known legend regarding Trojan Horse, that was put to work by Greeks to enter the city of Troy and win the battle. Like a dummy horse that was made for trojans as a gift, Johnnie trojan virus is dispersed like something legit, or, at least, valuable. Malicious apps are hiding inside of the Johnnie trojan virus, like Greeks within a huge wooden dummy of a horse.1Trojan viruses are among the leading malware kinds by its injection rate for quite a very long time. And now, during the pandemic, when malware got tremendously active, trojan viruses increased their activity, too. You can see a number of messages on diverse websites, where people are grumbling about the Johnnie trojan virus in their computers, as well as requesting for help with Johnnie trojan virus clearing.
Trojan Johnnie is a kind of virus that injects right into your computer, and after that executes a wide range of harmful features. These functions rely on a kind of Johnnie trojan: it may serve as a downloader for many other malware or as a launcher for another malicious program which is downloaded in addition to the Johnnie trojan. Throughout the last 2 years, trojans are additionally spread using email attachments, and in the majority of instances used for phishing or ransomware infiltration.
Johnnie2 also known as
| Bkav | W32.AIDetect.malware2 |
| Lionic | Trojan.Win32.Agent.b!c |
| Elastic | malicious (high confidence) |
| DrWeb | Trojan.DownLoader33.34359 |
| ClamAV | Win.Malware.Barys-9859544-0 |
| ALYac | Dropped:Generic.Spyagent.5.7D4083B0 |
| Cylance | Unsafe |
| Zillya | Trojan.Agent.Win32.1325263 |
| Sangfor | Trojan.Win32.Save.a |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Alibaba | TrojanDropper:Win32/Johnnie.1fb94517 |
| K7GW | Trojan ( 004cb1d21 ) |
| K7AntiVirus | Trojan ( 004cb1d21 ) |
| Cyren | W32/PWS.VPDP-8444 |
| ESET-NOD32 | a variant of Win32/Agent.UAW |
| APEX | Malicious |
| Avast | Win32:TrojanX-gen [Trj] |
| Cynet | Malicious (score: 100) |
| Kaspersky | not-a-virus:PSWTool.Win32.ChromePass.fb |
| BitDefender | Dropped:Generic.Spyagent.5.7D4083B0 |
| NANO-Antivirus | Trojan.Win32.Dwn.hjczxn |
| MicroWorld-eScan | Dropped:Generic.Spyagent.5.7D4083B0 |
| Tencent | Malware.Win32.Gencirc.11503509 |
| Ad-Aware | Dropped:Generic.Spyagent.5.7D4083B0 |
| Sophos | Mal/Generic-S |
| F-Secure | Trojan.TR/Agent.lyhon |
| BitDefenderTheta | Gen:NN.ZexaF.34170.IuW@aGpYCdmj |
| VIPRE | Trojan.Win32.Generic!BT |
| McAfee-GW-Edition | BehavesLike.Win32.Emotet.hc |
| FireEye | Generic.mg.6cb83b54331864e5 |
| Emsisoft | Dropped:Generic.Spyagent.5.7D4083B0 (B) |
| SentinelOne | Static AI – Malicious PE |
| Jiangmin | TrojanDropper.Agent.gjuc |
| Webroot | W32.Trojan.Gen |
| Avira | TR/Agent.lyhon |
| eGambit | Unsafe.AI_Score_99% |
| Antiy-AVL | Trojan/Win32.Wacatac |
| Kingsoft | Win32.Heur.KVM003.a.(kcloud) |
| Microsoft | Trojan:Win32/Johnnie.A!MTB |
| Arcabit | Generic.Spyagent.5.7D4083B0 |
| ZoneAlarm | HEUR:Trojan-Dropper.Win32.Agent.vho |
| GData | Win32.Trojan-Dropper.Johnnie.B |
| AhnLab-V3 | Trojan/Win32.Dinwod.R333134 |
| McAfee | GenericRXKI-LV!6CB83B543318 |
| MAX | malware (ai score=87) |
| VBA32 | BScope.Trojan.Infospy |
| Malwarebytes | Trojan.Downloader |
| Panda | Trj/Genetic.gen |
| Rising | Stealer.Facebook!1.CC5B (CLASSIC) |
| Yandex | Trojan.Agent!uCdE5uyLDxc |
| MaxSecure | Trojan.Malware.7164915.susgen |
| Fortinet | W32/Agent.UAW!tr |
| AVG | Win32:TrojanX-gen [Trj] |
| Paloalto | generic.ml |
Domains that associated with Johnnie:
| 0 | ip-api.com |
| 1 | www.facebook.com |
| 2 | hfuie32.2ihsfa.com |
What are the symptoms of Johnnie trojan?
- Attempts to connect to a dead IP:Port (2 unique times);
- At least one IP Address, Domain, or File Name was found in a crypto call;
- Drops a binary and executes it;
- Performs some HTTP requests;
- Unconventionial language used in binary resources: Chinese (Simplified);
- The binary likely contains encrypted or compressed data.;
- Steals private information from local Internet browsers;
- Installs itself for autorun at Windows startup;
- Creates a copy of itself;
- Attempts to create or modify system certificates;
The usual signs and symptom of the Johnnie trojan virus is a progressive entrance of various malware – adware, browser hijackers, et cetera. As a result of the activity of these harmful programs, your personal computer comes to be extremely sluggish: malware utilizes substantial amounts of RAM and CPU abilities.
Another visible result of the Johnnie trojan virus presence is unidentified operations showed off in task manager. In some cases, these processes may try to imitate system processes, however, you can recognize that they are not legit by looking at the origin of these processes. Quasi system applications and Johnnie trojan’s processes are always detailed as a user’s processes, not as a system’s.
How to remove Johnnie trojan virus?
- Download and install Loaris Trojan Remover.
- Open Loaris and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Approve the reset pressing “Yes” button in the appeared window.
- Restart your computer.
To delete Johnnie trojan and be sure that all additional malware, downloaded with the help of this trojan, will be cleaned, too, I’d recommend you to use Loaris Trojan Remover.
Johnnie trojan virus is incredibly hard to wipe out by hand. Its pathways are extremely difficult to track, as well as the modifications implemented by the Johnnie trojan are hidden deeply within the system. So, the chance that you will make your system 100% clean of trojans is extremely low. And also don't forget about malware that has been downloaded and install with the help of the Johnnie trojan virus. I believe these arguments suffice to assure that deleting the trojan virus by hand is a bad idea.
Johnnie removal guide
To detect and delete all malicious items on your PC using Loaris, it’s better to utilize Standard or Full scan. Removable scan, as well as Custom, will scan only specified folders, so these types of scans cannot provide the full information.
You can spectate the detects till the scan process goes. Nonetheless, to perform any actions against spotted malicious programs, you need to wait until the process is over, or to interrupt the scan.
To choose the appropriate action for each detected viruses, click the button in front of the detection name of detected viruses. By default, all viruses will be moved to quarantine.
How to remove Johnnie Trojan?
Name: Johnnie
Description: Trojan Johnnie is a kind of virus that infiltrates into your computer, and after that performs different destructive functions. These features depend upon a type of Johnnie trojan: it can act as a downloader for many other malware or as a launcher for another destructive program which is downloaded in addition to the Johnnie trojan. During the last two years, trojans are also dispersed via e-mail attachments, and most of situations utilized for phishing or ransomware infiltration.
Operating System: Windows
Application Category: Trojan
User Review
( votes)- What is Trojan Horse: https://en.wikipedia.org/wiki/Trojan_horse_(computing)
- Johnnie VirusTotal Report:
