Trojan:Win32/Tinba.PDSK!MTB removal guide

The Trojan:Win32/Tinba.PDSK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Tinba.PDSK!MTB virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan:Win32/Tinba.PDSK!MTB?


File Info:
name: CF5FF77FB458B22DA5A5.mlw
path: /opt/CAPEv2/storage/binaries/0947bf203d874288229921f8d74d4e787b85589b17a91e09967fd511f4ca6405
crc32: ABFCFA7B
md5: cf5ff77fb458b22da5a5bc788e930f3d
sha1: c7e1d061886f03246e96e74b1622621fd28d63eb
sha256: 0947bf203d874288229921f8d74d4e787b85589b17a91e09967fd511f4ca6405
sha512: 302145b08207a0dfe863d99a149820366a0b13d571a894718ca7c9be7d1a36fa9dd476f64f9b3420b62be2824d554d808e3d8cca445ec51e228377a9c85146b2
ssdeep: 48:zYQalf4E9g5K5MCHjEilO0ylK6KGrTp+l2WBuGJ8+u3B:9av9gA5lDEi00ylKBGrTMEWf8+4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T128C18285EBAF41BDC52E0CF01129FD1FB3210A6489ACFA12ED9B0B63D4B72259692C50
sha3_384: d799f727f9fefea18bd46afa4bf3cfad70e7955a170e6571e1effee4b2928a7a5eb362889fb3dfde0966c90d69d88d8f
ep_bytes: 
timestamp: 2009-07-14 12:05:22

Version Info:
0: [No Data]

Trojan:Win32/Tinba.PDSK!MTB also known as:

Bkav	W32.AIDetectMalware
Skyhigh	BehavesLike.Win32.Generic.xz
Malwarebytes	Malware.AI.2955288951
Alibaba	Trojan:Win32/Tinba.e68742fe
ClamAV	Win.Malware.Qbot-9952673-0
Trapmine	malicious.high.ml.score
Sophos	Troj/Qbot-FC
Ikarus	Trojan.Win32.Tinba
Google	Detected
Varist	W32/S-b8e35df4!Eldorado
Microsoft	Trojan:Win32/Tinba.PDSK!MTB
AhnLab-V3	Malware/Win32.RL_Generic.R301406
Rising	Trojan.Generic@AI.82 (RDMK:d1EWthd/KPnhtGU1gYRS+Q)
Fortinet	W32/Qbot.FC!tr
DeepInstinct	MALICIOUS

How to remove Trojan:Win32/Tinba.PDSK!MTB?

Trojan:Win32/Tinba.PDSK!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X