Malware

Win32/PSW.LdPinch.NMP (file analysis)

Malware Removal

The Win32/PSW.LdPinch.NMP is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/PSW.LdPinch.NMP virus can do?

  • Collects information about installed applications
  • Operates on local firewall’s policies and settings
  • Harvests credentials from local FTP client softwares
  • Harvests information related to installed mail clients
  • Anomalous binary characteristics

How to determine Win32/PSW.LdPinch.NMP?


File Info:

crc32: 2CED7644
md5: 0b4698319567ce37669382e256dc125e
name: 0B4698319567CE37669382E256DC125E.mlw
sha1: 236c18aae9282ebd9ca0264abe6e1a6c3c7fbc49
sha256: 266dc678a09054e4f16a2646e1e3cdeab9a1229305d2fb08d6f550106b76f1e6
sha512: 2163a064b61390e4ca495f108e2f26898d307d0609d2396fb2726ab4dcc40cbe071e35919ee579de7a7bd1731cfa8068006b5378bcdbad2e0d6bd57710b0ee01
ssdeep: 768:0gtG16ltGDqAxvo0lC1S2G7YNykx0xJCFJM:1g16ltce0lCAUpPM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/PSW.LdPinch.NMP also known as:

BkavW32.AIDetect.malware2
K7AntiVirusPassword-Stealer ( 0000065f1 )
LionicTrojan.Win32.PdPinch.i!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.LDPinch.462
CynetMalicious (score: 100)
ALYacGen:Trojan.FirewallBypass.bmX@a0se@Zj
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojanPSW:Win32/PdPinch.0725c475
K7GWPassword-Stealer ( 0000065f1 )
Cybereasonmalicious.19567c
CyrenW32/LdPinch.G.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/PSW.LdPinch.NMP
APEXMalicious
AvastWin32:LdPinch-AH [Trj]
ClamAVWin.Trojan.PdPinch-1
KasperskyTrojan-PSW.Win32.PdPinch.gen
BitDefenderGen:Trojan.FirewallBypass.bmX@a0se@Zj
NANO-AntivirusTrojan.Win32.LdPinch.fmye
MicroWorld-eScanGen:Trojan.FirewallBypass.bmX@a0se@Zj
TencentWin32.Trojan-qqpass.Qqrob.Fry
Ad-AwareGen:Trojan.FirewallBypass.bmX@a0se@Zj
SophosMal/Generic-R + Troj/LdPnch-Gen
ComodoMalware@#1b556oufhjl7q
BitDefenderThetaAI:Packer.D692E4651E
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Injector.mh
FireEyeGeneric.mg.0b4698319567ce37
EmsisoftGen:Trojan.FirewallBypass.bmX@a0se@Zj (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.PSW.PdPinch.ah
AviraTR/Spy.Gen
Antiy-AVLTrojan/Generic.ASMalwS.33A626
MicrosoftPWS:Win32/Ldpinch.gen
ZoneAlarmTrojan-PSW.Win32.PdPinch.gen
GDataGen:Trojan.FirewallBypass.bmX@a0se@Zj
AhnLab-V3Trojan/Win32.RL_PdPinch.R284479
Acronissuspicious
McAfeeArtemis!0B4698319567
MAXmalware (ai score=99)
VBA32BScope.Trojan-Spy.Zbot
PandaTrj/CI.A
YandexTrojan.XBot.Gen.US
IkarusTrojan-PWS.Win32.LdPinch
MaxSecureTrojan.Malware.23943.susgen
FortinetW32/LDPinch.DF!tr.pws
AVGWin32:LdPinch-AH [Trj]
Paloaltogeneric.ml

How to remove Win32/PSW.LdPinch.NMP?

Win32/PSW.LdPinch.NMP removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment