What is “Johnnie.100139 (B)”?

The Johnnie.100139 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Johnnie.100139 (B) virus can do?

Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Creates a copy of itself

How to determine Johnnie.100139 (B)?


File Info:
crc32: 68B39F14
md5: 00404e6323aa67bfdd72879374d8ca57
name: 00404E6323AA67BFDD72879374D8CA57.mlw
sha1: 37395b97228cc5274aded3e4c3c8ee3f474129db
sha256: 3d0d9f92c39e611fca279bfa581bb050794b5babb36b6e0ad17f3303abf9a42d
sha512: 066b3d6023b0a29833fedfbb8bb780ba504c28863ecb942ef9aa3b8358c98738f0d96fc42e33d6739a9d3b0f831223a909c11492001721e6bfa3e3d4282827dd
ssdeep: 3072:PDd/Gl1OmENm2eK7mnoUSgpAY8ODcDcm7cIsxNtur5Hv5eqL3MDEroZqMzDFEGk:PB6BENm2eK7mnoUSgpAY8ODcDcm7cIs
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Johnnie.100139 (B) also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Johnnie.100139
Cylance	Unsafe
Zillya	Trojan.ClipBanker.Win32.700
Sangfor	Trojan.Win32.Save.a
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.323aa6
ESET-NOD32	a variant of Win32/ClipBanker.FQ
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan-Downloader.Win32.Adload.vho
BitDefender	Gen:Variant.Johnnie.100139
NANO-Antivirus	Trojan.Win32.Banker.fcivwv
MicroWorld-eScan	Gen:Variant.Johnnie.100139
Tencent	Malware.Win32.Gencirc.114cfce0
Ad-Aware	Gen:Variant.Johnnie.100139
Sophos	Mal/Generic-S
Comodo	Malware@#174ivd6v7f4mm
BitDefenderTheta	Gen:NN.ZexaF.34050.luW@ayR6!Eai
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.00404e6323aa67bf
Emsisoft	Gen:Variant.Johnnie.100139 (B)
Jiangmin	Trojan.Generic.ciumb
Avira	HEUR/AGEN.1116876
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.2623DEF
Microsoft	Trojan:Win32/Tiggre!rfn
Arcabit	Trojan.Johnnie.D1872B
GData	Gen:Variant.Johnnie.100139
AhnLab-V3	Malware/Win32.Generic.C2555867
McAfee	Artemis!00404E6323AA
MAX	malware (ai score=97)
VBA32	Trojan.Fuerboos
Malwarebytes	Malware.AI.1257094732
Panda	Trj/GdSda.A
Rising	Trojan.Generic@ML.92 (RDML:M5FEPmmN0BKoY9oOHCod0w)
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.FQ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HwoCEpsA

How to remove Johnnie.100139 (B)?

Johnnie.100139 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X