Trojan:Win32/Pincav.ARA!MTB removal

The Trojan:Win32/Pincav.ARA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Pincav.ARA!MTB virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Deletes executed files from disk
Anomalous binary characteristics

How to determine Trojan:Win32/Pincav.ARA!MTB?


File Info:
name: 89ABA7A49191471E04A2.mlw
path: /opt/CAPEv2/storage/binaries/bb11c35a70ec348ef3257bac2dc922a6c2cb86100594828efe7736f194d2d4a6
crc32: 778417BD
md5: 89aba7a49191471e04a23661083187b6
sha1: 6f4707e502c4b4d3525ba5c51195f1d2671c250e
sha256: bb11c35a70ec348ef3257bac2dc922a6c2cb86100594828efe7736f194d2d4a6
sha512: 1054d0c3505a3d2d7d0bc05246e1c5236aea9a10d5a40e049139498a3ff4d197ec95a975970fd3f107c9ae9b45326d63694c7438bfddfb778a8f465deb65c607
ssdeep: 768:x/nAevU3u+VNDkC0H9ALW/Z0dPWyYzTnLlNey1GJrDKkHMKejknCMBuQDXdT/fd9:xL8XDkBdUWcnYvnLl7PkHMFGu4Xtd9
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T110636EC59FA31DC3FE597131484BFB0F4686E7C84BAE9DA4EBD30A945048899C63335A
sha3_384: e1a6338b5cac630d7e73504636e59bea9b9de466cc083a33f6f1a18641e6fbc179014c2c975362bb07abf2c4b89dc7bd
ep_bytes: 5557565381ec6c0900008db4246c0100
timestamp: 2008-08-04 21:06:40

Version Info:
0: [No Data]

Trojan:Win32/Pincav.ARA!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Pincav.tsx7
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop3.39307
MicroWorld-eScan	Gen:Trojan.Heur.eiZ@H1@pgfo
Skyhigh	BehavesLike.Win32.Generic.lh
McAfee	GenericRXAA-AA!89ABA7A49191
Malwarebytes	Malware.AI.1143842143
Zillya	Trojan.Pincav.Win32.29062
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 0037b83f1 )
Alibaba	TrojanDownloader:Win32/Pincav.0a6323b8
K7GW	Trojan-Downloader ( 0037b83f1 )
Cybereason	malicious.491914
BitDefenderTheta	AI:Packer.ED81A58E1B
VirIT	Trojan.Win32.MulDrop3.CGDV
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.NIV
APEX	Malicious
Kaspersky	Trojan.Win32.Pincav.yl
BitDefender	Gen:Trojan.Heur.eiZ@H1@pgfo
NANO-Antivirus	Trojan.Win32.DownLoad.hjxcck
Avast	Win32:DropperX-gen [Drp]
Tencent	Trojan.Win32.Pincav.hb
Emsisoft	Gen:Trojan.Heur.eiZ@H1@pgfo (B)
F-Secure	Trojan.TR/Downloader.Gen
VIPRE	Gen:Trojan.Heur.eiZ@H1@pgfo
FireEye	Generic.mg.89aba7a49191471e
Sophos	Mal/Behav-009
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=84)
Jiangmin	TrojanDownloader.Agent.dorz
Google	Detected
Avira	TR/Downloader.Gen
Varist	W32/Agent.IGF.gen!Eldorado
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Kingsoft	malware.kb.a.998
Microsoft	Trojan:Win32/Pincav.ARA!MTB
Gridinsoft	Trojan.Win32.Downloader.sa
Arcabit	Trojan.Heur.EA89E7
ZoneAlarm	Trojan.Win32.Pincav.yl
GData	Gen:Trojan.Heur.eiZ@H1@pgfo
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.R17642
VBA32	Trojan.Pincav
ALYac	Gen:Trojan.Heur.eiZ@H1@pgfo
Cylance	unsafe
Panda	Trj/CI.A
Rising	Trojan.Tiggre!8.ED98 (TFE:4:A05wwM0qrIT)
Yandex	Trojan.DL.Agent!vT1bXl8W+24
Ikarus	Trojan-Downloader.Win32.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.NIV!tr
AVG	Win32:DropperX-gen [Drp]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Trojan[downloader]:Win/Pincav.ARA!MTB

How to remove Trojan:Win32/Pincav.ARA!MTB?

Trojan:Win32/Pincav.ARA!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X