Johnnie.14008 removal guide

The Johnnie.14008 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Johnnie.14008 virus can do?

Executable code extraction
Anomalous binary characteristics

How to determine Johnnie.14008?


File Info:
crc32: 47B1FE78
md5: ba69cd842ae6c7d75f81d5d095d661c6
name: BA69CD842AE6C7D75F81D5D095D661C6.mlw
sha1: cc5ec0000a81ccc9cf3704092d64e2d43bc3516c
sha256: 88ef652c4d45ca723c1c56d69fa7935c4978ec714c9d40d175f2a369f8fce27d
sha512: 96b25e28392542d25fe354b27a4ffcc3749d8315107d2cdd941d65f43f12da49e5ca60a4519dadd7c8bdbb708c3576d25343199d4ea9cba0db51e074177a5ec3
ssdeep: 24576:MdvjQviKpH90EHiXkg/rb8zL8D+p2Cg9a80GCcGnm:MdvjQvdpHKXNf8z4ip2Cg9cG7J
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: wLRoZ
FileVersion: 1.00.0865
CompanyName: flaSh most authoritative dictionary 
Comments: DAOP-ADL is an architecture description language used to describe components and aspects
ProductName: SidebarByLeny
ProductVersion: 1.00.0865
FileDescription: What does DAOP stand for? DAOP abbreviation. Define DAOP at AcronymAttic.com
OriginalFilename: wLRoZ.exe

Johnnie.14008 also known as:

K7AntiVirus	Trojan ( 004f09ea1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.858
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Johnnie.14008
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 004f09ea1 )
Cybereason	malicious.42ae6c
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Filecoder.Shade.B
Zoner	Trojan.Win32.40981
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.Mansabo-6611665-0
Kaspersky	Trojan.Win32.Fsysna.dfdw
BitDefender	Gen:Variant.Johnnie.14008
NANO-Antivirus	Trojan.Win32.Encoder.edhpmb
MicroWorld-eScan	Gen:Variant.Johnnie.14008
Tencent	Win32.Trojan.Fsysna.Pgmr
Ad-Aware	Gen:Variant.Johnnie.14008
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZevbaF.34670.1m3@aqauFvbi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_CRYPSHED.SMV1
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.cc
FireEye	Generic.mg.ba69cd842ae6c7d7
Emsisoft	Gen:Variant.Johnnie.14008 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Fsysna.dhu
Avira	HEUR/AGEN.1113142
eGambit	Unsafe.AI_Score_99%
Microsoft	Ransom:Win32/Troldesh.A
AegisLab	Trojan.Win32.Fsysna.4!c
GData	Gen:Variant.Johnnie.14008
AhnLab-V3	Trojan/Win32.MDA.C1459414
McAfee	Ransomware-FLO!BA69CD842AE6
MAX	malware (ai score=99)
VBA32	Trojan.Fsysna
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_CRYPSHED.SMV1
Rising	Trojan.Injector!8.C4 (CLOUD)
Ikarus	Trojan-Ransom.FileCrypter
Fortinet	W32/Injector.CZDF!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.45a

How to remove Johnnie.14008?

Johnnie.14008 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X