Categories: Malware

How to remove “PWS:Win32/Ldpinch.CX”?

The PWS:Win32/Ldpinch.CX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PWS:Win32/Ldpinch.CX virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine PWS:Win32/Ldpinch.CX?


File Info:
name: CFA8944A744D401E23EE.mlwpath: /opt/CAPEv2/storage/binaries/736950938c8d033bf770382c1c88b589c014b4e96c1ace0b79a6d68d292f190dcrc32: FA331D2Amd5: cfa8944a744d401e23ee7715dcded587sha1: f0db6067c318520578047ef21bf5576b84fe3263sha256: 736950938c8d033bf770382c1c88b589c014b4e96c1ace0b79a6d68d292f190dsha512: 01b00e1bd1d2894e0d34d5a78a4c05e79d73585705a0c764b7e08075cac8863922abd3f41310e64acc187441e43660e3f0d9b73fcb31ca58e541a08dfab8a835ssdeep: 12288:ppfOiwL/vMJnNeRpdUpPMk1kNk55fN4ClVAecFakFcx0Px13yIu/+/unEIZUlxOG:ppdQKNePpkYkKURMFXPbdIKxQX2type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T104156D23F7E1C433D1762A3C9CBB97D49B297D012E38A54A37D49E4C5E3A681AC243D6sha3_384: 83e02687ca5e9db28e8ef1811383125c1b0cbf4e3099b3894c8659dd2e0215483faa7d5c5991d5f9cc66d28fc4206e0fep_bytes: 558bec83c4c4b8887c4900e810e9f6fftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

PWS:Win32/Ldpinch.CX also known as:

Lionic	Trojan.Win32.Asper.los5
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Genie.448
FireEye	Generic.mg.cfa8944a744d401e
Skyhigh	Artemis!Trojan
McAfee	Artemis!CFA8944A744D
Malwarebytes	BHO.Trojan.Dropper.DDS
Zillya	Backdoor.Asper.Win32.56
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 7000000f1 )
Alibaba	Backdoor:Win32/Asper.30752716
K7GW	Trojan ( 7000000f1 )
CrowdStrike	win/malicious_confidence_100% (D)
Baidu	Win32.Trojan.BHO.i
VirIT	Trojan.Win32.BHO.QZO
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/BHO.OAV
ClamAV	Win.Trojan.Asper-25
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Genie.448
NANO-Antivirus	Trojan.Win32.Click.cvhas
Avast	Win32:Delf-NZO [Trj]
Tencent	Malware.Win32.Gencirc.10b83abb
Emsisoft	Gen:Variant.Genie.448 (B)
F-Secure	Backdoor.BDS/Asper.B
DrWeb	BackDoor.Click.1087
Sophos	Mal/Banker-DQ
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=100)
Jiangmin	Backdoor/Asper.bg
Google	Detected
Avira	BDS/Asper.B
Varist	W32/BadBHO.AI.gen!Eldorado
Antiy-AVL	Trojan[Backdoor]/Win32.Asper
Kingsoft	Win32.Hack.Generic.a
Microsoft	PWS:Win32/Ldpinch.CX
Xcitium	TrojWare.Win32.BHO.VAE@2ndgle
Arcabit	Trojan.Genie.448
ViRobot	Backdoor.Win32.A.Asper.920704.EG
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Genie.448
Cynet	Malicious (score: 100)
AhnLab-V3	Backdoor/Win32.Asper.R9682
VBA32	Backdoor.Asper
ALYac	Gen:Variant.Genie.448
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_BADBHO_0000021.TOMA
Rising	Trojan.Clicker.Win32.Agent.fsl (CLASSIC)
Yandex	Trojan.GenAsa!UJfA/g1CoSM
Ikarus	Backdoor.Win32.Asper
Fortinet	W32/BHO.OAV!tr
AVG	Win32:Delf-NZO [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Trojan[spy]:Win/BHO.OAV