Should I remove “Win32:Injector-BCF [Trj]”?

The Win32:Injector-BCF [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Injector-BCF [Trj] virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Win32:Injector-BCF [Trj]?


File Info:
name: 4F205F34C9DB306BFD20.mlw
path: /opt/CAPEv2/storage/binaries/9530eea06427a600b1ba94f5ec5caa37ff40784e15ce8d7c3a2a5771dcf54429
crc32: C7EF88D7
md5: 4f205f34c9db306bfd20ce3fc9e12a44
sha1: dfe49a3c01a522431c2aca2b0a35425010bfe965
sha256: 9530eea06427a600b1ba94f5ec5caa37ff40784e15ce8d7c3a2a5771dcf54429
sha512: b4c614da656eaa3038a6955e8a9a508da2f089e3de4dd836c874e7826579ccd5978e70391d44d93fe7f36ac006fcff1a007114363aeaea06f31f7816c528d015
ssdeep: 768:CyyqymQdG6CtPFzWXnjX8VYVFomVBe+s:VyqymQ46CjUjX8VYRB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C23362C6B8E27974C0C759BA5419867ABF1B6E0198EC310CD6C481D9C04AFA14B5FBBF
sha3_384: 211686da2970a330c77523b1f2cbe03fb7f01fb4a2d938b045faf08215d5c0ddd1fd68a9f55cd6f855d2f1f190dd4b0a
ep_bytes: 558bec83c4f0b8f4cb4000e85869ffff
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Win32:Injector-BCF [Trj] also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.64923378
FireEye	Trojan.GenericKD.64923378
McAfee	Artemis!4F205F34C9DB
Cylance	unsafe
VIPRE	Trojan.GenericKD.64923378
Sangfor	Hacktool.Win32.Injector.Vznh
BitDefender	Trojan.GenericKD.64923378
Arcabit	Trojan.Generic.D3DEA6F2
Symantec	Trojan.Gen.MBT
Cynet	Malicious (score: 100)
Avast	Win32:Injector-BCF [Trj]
Alibaba	VirTool:Win32/Injector.28c0cf80
Rising	HackTool.Injector!8.1E2 (TFE:5:thJKztzwTtU)
Sophos	Mal/Generic-S
DrWeb	Win32.HLLW.Phorpiex.90
McAfee-GW-Edition	BehavesLike.Win32.Generic.qh
Emsisoft	Trojan.GenericKD.64923378 (B)
SentinelOne	Static AI – Suspicious PE
Xcitium	TrojWare.Win32.Injector.RUS@4xl6yq
Microsoft	VirTool:Win32/Injector.gen!DL
GData	Trojan.GenericKD.64923378
DeepInstinct	MALICIOUS
APEX	Malicious
Tencent	Malware.Win32.Gencirc.13b07d53
MAX	malware (ai score=87)
MaxSecure	Trojan.Malware.197354242.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Injector-BCF [Trj]

How to remove Win32:Injector-BCF [Trj]?

Win32:Injector-BCF [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X