Win32:Joiner-C [Trj] information

The Win32:Joiner-C [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:Joiner-C [Trj] virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32:Joiner-C [Trj]?


File Info:
name: 1F8949C10EDB224FB86F.mlw
path: /opt/CAPEv2/storage/binaries/0cd2522f50af082f04400b807f50e3638f137057f1c3a45caaf278a309e4624b
crc32: 6697763A
md5: 1f8949c10edb224fb86fffa5a102cc55
sha1: 066d73a70de1df3323fd7bba5009e836ef851d59
sha256: 0cd2522f50af082f04400b807f50e3638f137057f1c3a45caaf278a309e4624b
sha512: 188a5fef136db5b6fced7aa67ebf25ec7441e0c9eb2c92ce43da144d3ec70e59eb96876531112a8e893f7159a66e741a0920958da935c6a911530665c11651e8
ssdeep: 3072:3pKt0oKIqMqB6J6gE4UxFuu8le2/RrWGM9TgK2r/t5nYMjFduxmvv5P76iMNAsYv:3phoRqB6J68U3uu8A2JWGM90z/tbfuiw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C2042203F09883A5C124FC327484C7B27B814197E7507FD59BA2746EF5885E3CABEA92
sha3_384: 012699f40924457a922aa33a8e19f51ef02199bc08562bed67993d164e7b7e3a6605295779fd287b58d998d7bcb9230a
ep_bytes: 00000000000000000000000000000000
timestamp: 2004-10-23 22:23:39

Version Info:
0: [No Data]

Win32:Joiner-C [Trj] also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
FireEye	Generic.mg.1f8949c10edb224f
Skyhigh	BehavesLike.Win32.VirRansom.cc
Malwarebytes	MachineLearning/Anomalous.100%
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.70de1d
Baidu	Win32.Trojan-Dropper.Microjoin.c
Symantec	Downloader
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	UDS:Trojan.Win32.GenericML.xnet
Avast	Win32:Joiner-C [Trj]
F-Secure	Dropper.DR/Injector.toian
TrendMicro	TROJ_GEN.R03BC0DKN23
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
Ikarus	Trojan-Dropper.Win32.Microjoin
Jiangmin	Trojan/PSW.Xiyou.dq
Varist	W32/FraudLoad.F32_DET!Eldorado
Avira	DR/Injector.toian
Kingsoft	malware.kb.b.996
Xcitium	TrojWare.Win32.TrojanDropper.Microjoin.~D@3193xx
Microsoft	TrojanDropper:Win32/Microjoin.gen!B
ZoneAlarm	UDS:Trojan.Win32.GenericML.xnet
GData	Win32.Trojan.Agent.362OHK
Google	Detected
VBA32	MalwareScope.Trojan-PSW.Pinch.23
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BC0DKN23
Rising	Trojan.Generic@AI.100 (RDML:XpTd3NWMGAB//giBsAP7vg)
Yandex	Constructor.Microjoiner.AC
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.185628869.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Joiner-C [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Win32:Joiner-C [Trj]?

Win32:Joiner-C [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X