Malware

Should I remove “PWS:Win32/Ldpinch”?

Malware Removal

The PWS:Win32/Ldpinch is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PWS:Win32/Ldpinch virus can do?

  • Executable code extraction
  • The binary likely contains encrypted or compressed data.
  • Creates a hidden or system file
  • Anomalous binary characteristics

How to determine PWS:Win32/Ldpinch?


File Info:

crc32: 854CAEE9
md5: be0d4f25305bdd6988024e0df863b629
name: BE0D4F25305BDD6988024E0DF863B629.mlw
sha1: 175ac456a5237ef0eecf0e78b9de50971a4a1af0
sha256: 2662726076ff66dd786bdff6b6d70e884268c3e3e4daa7df4d3099d962add7a3
sha512: b46590117bf504cbc42f61ba9fcc35bea2548d9ee5c3fc0538c65d106af186782438910ce5ddc4caad121512d60ed44475ba8b0d4126661f812b784ad619fcb4
ssdeep: 1536:UTavXm8Cpd4sjMP/hU/FKaJdRJYSwQSzsAKAfcx6h4uYvMA:xmppq/i/sa9JbwQSzsAK8cMh4uYb
type: PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed

Version Info:

0: [No Data]

PWS:Win32/Ldpinch also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.743896
ALYacGen:Variant.Razy.743896
CylanceUnsafe
VIPRETrojan-PSW.Win32.LdPinch.syo (fs)
AegisLabTrojan.Win32.VB.b!c
SangforTrojan.Win32.Save.a
K7AntiVirusNetWorm ( 700000151 )
BitDefenderGen:Variant.Razy.743896
K7GWNetWorm ( 700000151 )
Cybereasonmalicious.5305bd
BitDefenderThetaAI:Packer.4E1F55511E
CyrenW32/LdPinch.A.gen!Eldorado
APEXMalicious
AvastWin32:Evo-gen [Susp]
ClamAVWin.Trojan.LdPinch-175
KasperskyHEUR:Trojan.Win32.Generic
AlibabaRansom:Win32/Kisucrypt.8444cacf
NANO-AntivirusTrojan.Win32.LDPinch.bfija
RisingDropper.Generic!8.35E (CLOUD)
Ad-AwareGen:Variant.Razy.743896
EmsisoftGen:Variant.Razy.743896 (B)
ComodoMalware@#2mm00hnpp8lk7
DrWebTrojan.PWS.LDPinch.11822
ZillyaTrojan.LdPinch.Win32.886
McAfee-GW-EditionBehavesLike.Win32.Dropper.mh
FireEyeGeneric.mg.be0d4f25305bdd69
SophosML/PE-A
IkarusTrojan-PWS.Win32.LdPinch
eGambitUnsafe.AI_Score_99%
AviraTR/Dropper.Gen
MAXmalware (ai score=100)
KingsoftWin32.Troj.VB.cb.(kcloud)
MicrosoftPWS:Win32/Ldpinch.gen
ArcabitTrojan.Razy.DB59D8
GDataGen:Variant.Razy.743896
CynetMalicious (score: 100)
McAfeePWS-LDPinch.cm
VBA32BScope.TrojanDropper.Dron
MalwarebytesMalware.AI.1735093079
PandaTrj/Ldpinch.WE
TencentWin32.Trojan.Generic.Pftd
YandexTrojan.GenAsa!aKlF6mR7ITo
SentinelOneStatic AI – Malicious PE
FortinetW32/LdPinch.CDS!tr.pws
WebrootW32.Malware.Gen
AVGWin32:Evo-gen [Susp]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/TrojanPSW.LdPinch.HxIBar8A

How to remove PWS:Win32/Ldpinch?

PWS:Win32/Ldpinch removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment