Johnnie.86008 (file analysis)

The Johnnie.86008 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Johnnie.86008 virus can do?

Behavioural detection: Executable code extraction – unpacking
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Johnnie.86008?


File Info:
name: C463076116BF64B17793.mlw
path: /opt/CAPEv2/storage/binaries/98c039d942ee791d01e939325a007be38236adf79f13c1029113401ee8bbcaa8
crc32: E66CE5EC
md5: c463076116bf64b17793fe550e3a6739
sha1: a1473587ff2a7e899443733003d2cdea53a1d0f8
sha256: 98c039d942ee791d01e939325a007be38236adf79f13c1029113401ee8bbcaa8
sha512: 8b4e913344c272ad997fa1da99bba871d301c991fd51bd648ace095ac338495b5294d4335753dfa0d9ba35302ada0c4f59c096fab299851559a669893ea4ee83
ssdeep: 1536:/o19sEuQmDPq7dU7NedoBYHCEf72h+SyzKs:AMVQz9t
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E2733A59B840E08BC966C671C5F6C4BA38053D67A8600D5728C63FAF3772EA738F155A
sha3_384: 386a134356f3c2cb7fa2554db3d82a90ddd770920693644a415ad491241ee68a77d9e13b527169b39c5cc070e908076d
ep_bytes: 6878b54000e8f0ffffff000000000000
timestamp: 2013-08-31 02:16:19

Version Info:
Translation: 0x0409 0x04b0
Comments: Keygen Sketchup Pro 2013
CompanyName: X-Force
FileDescription: Keygen Sketchup Pro 2013
LegalCopyright: X-Force
LegalTrademarks: X-Force
ProductName: Keygen Sketchup Pro 2013
FileVersion: 1.05.0015
ProductVersion: 1.05.0015
InternalName: keygen sketchup 2013
OriginalFilename: keygen sketchup 2013.exe

Johnnie.86008 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Multi.Generic.4!c
MicroWorld-eScan	Gen:Variant.Johnnie.86008
FireEye	Gen:Variant.Johnnie.86008
ALYac	Gen:Variant.Johnnie.86008
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Riskware.Win32.Agent.ky
BitDefender	Gen:Variant.Johnnie.86008
BitDefenderTheta	Gen:NN.ZevbaF.34084.em0@ae2LrLpi
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002C0OGE21
Avast	Win32:Malware-gen
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/Generic.cfe8f33f
Ad-Aware	Gen:Variant.Johnnie.86008
Comodo	Malware@#2dxkr4xjjxs9u
TrendMicro	TROJ_GEN.R002C0OGE21
APEX	Malicious
Webroot	W32.Malware.Heur
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Johnnie.86008
Cynet	Malicious (score: 100)
McAfee	Artemis!C463076116BF
VBA32	Trojan.Wacatac
Malwarebytes	Generic.Malware/Suspicious
Yandex	Trojan.Agent!oH997HQsx6A
MAX	malware (ai score=94)
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Malware-gen
Cybereason	malicious.116bf6

How to remove Johnnie.86008?

Johnnie.86008 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X