Trojan:Win32/Pincav.ARA!MTB removal tips

The Trojan:Win32/Pincav.ARA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Pincav.ARA!MTB virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan:Win32/Pincav.ARA!MTB?


File Info:
name: BB85ECDFE151D0C26A8B.mlw
path: /opt/CAPEv2/storage/binaries/53bfcb495c1626468544eab6d9ce3f90a4df61c20ad50067d6534ced78abdb14
crc32: 74585ABD
md5: bb85ecdfe151d0c26a8bd7b9be579268
sha1: 436d1c57414658fc9d4f3037df88f3d95cafb416
sha256: 53bfcb495c1626468544eab6d9ce3f90a4df61c20ad50067d6534ced78abdb14
sha512: 83f516f9c486f5049526d86f9e45691fc81a4cbb67392006ad8168944f01a052e388975a909d889f375275a18b9c171a41309977e0cfcb5c3ea6a805f489993a
ssdeep: 1536:x+Yh85gHOEutUKZKEHfmWqk0AEPGER3ZaqgA:fh3HOEuaWKE+/RA87R3gA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F8635AABC1173161F6E9DC70EACA353495E7296DD32A00DBFC0BFA5085AC9C264B671C
sha3_384: 326e07a756c83e259a6892fdb6eb92926ddf1dcd05370b5201b5de0b78fb5233a2bdb2fa0aa0fc5aef955c270907f15c
ep_bytes: 5557565381ec6c0900008db4246c0100
timestamp: 2008-08-04 21:06:40

Version Info:
0: [No Data]

Trojan:Win32/Pincav.ARA!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Pincav.tsx7
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop3.39307
MicroWorld-eScan	Gen:Trojan.Heur.eiZ@H1@pgfo
FireEye	Generic.mg.bb85ecdfe151d0c2
Skyhigh	BehavesLike.Win32.Generic.lh
McAfee	GenericRXAA-AA!BB85ECDFE151
Malwarebytes	Malware.AI.1143842143
Zillya	Trojan.Pincav.Win32.29062
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 0037b83f1 )
K7GW	Trojan-Downloader ( 0037b83f1 )
Cybereason	malicious.fe151d
BitDefenderTheta	AI:Packer.ED81A58E1B
VirIT	Trojan.Win32.MulDrop3.CGDV
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.NIV
APEX	Malicious
Kaspersky	Trojan.Win32.Pincav.yl
BitDefender	Gen:Trojan.Heur.eiZ@H1@pgfo
NANO-Antivirus	Trojan.Win32.DownLoad.hjxcck
Avast	Win32:DropperX-gen [Drp]
Tencent	Trojan.Win32.Pincav.hb
Emsisoft	Gen:Trojan.Heur.eiZ@H1@pgfo (B)
F-Secure	Trojan.TR/Downloader.Gen
VIPRE	Gen:Trojan.Heur.eiZ@H1@pgfo
Sophos	Mal/Behav-009
SentinelOne	Static AI – Malicious PE
GData	Gen:Trojan.Heur.eiZ@H1@pgfo
Jiangmin	TrojanDownloader.Agent.dorz
Varist	W32/Agent.IGF.gen!Eldorado
Avira	TR/Downloader.Gen
MAX	malware (ai score=84)
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Arcabit	Trojan.Heur.EA89E7
ZoneAlarm	Trojan.Win32.Pincav.yl
Microsoft	Trojan:Win32/Pincav.ARA!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.R17642
VBA32	Trojan.Pincav
ALYac	Gen:Trojan.Heur.eiZ@H1@pgfo
TACHYON	Trojan/W32.Agent.72471.C
Cylance	unsafe
Rising	Trojan.Tiggre!8.ED98 (TFE:4:A05wwM0qrIT)
Yandex	Trojan.DL.Agent!vT1bXl8W+24
Ikarus	Trojan-Downloader.Win32.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.NIV!tr
AVG	Win32:DropperX-gen [Drp]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan:Win32/Pincav.ARA!MTB?

Trojan:Win32/Pincav.ARA!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X