Win32:LdPinch-CLK [Trj] removal

The Win32:LdPinch-CLK [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32:LdPinch-CLK [Trj] virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32:LdPinch-CLK [Trj]?


File Info:
name: 616BC40327CE78C93E63.mlw
path: /opt/CAPEv2/storage/binaries/184ba6e9967fb0fe8ee6d104beb00dcdaace8cd4142484a66d4d4dccaf62eed9
crc32: A8AFBC61
md5: 616bc40327ce78c93e63e52dbfa3d996
sha1: fa17fd854af2cd7111523ec782b3b3cd79b46c62
sha256: 184ba6e9967fb0fe8ee6d104beb00dcdaace8cd4142484a66d4d4dccaf62eed9
sha512: 8daad82069297ba744274f53ce34e7f855fad22bdde8756572a890e6d3392d2d8d770cc9210454a16c0ca674c9be105aacf0fa8877e3ae251aa8dc6b55710ffb
ssdeep: 384:V6UOUN5K3wz2d/8BA3lJl3L8/FmZVesgH+R2Cv2mgAsxphAiw1a+wSc2jnVAh303:nBY6MLymZgs0E4mELhW0snAhuT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13B34D08041A8F1A2DE55F0B0096D56E9F42B0F6559C1A49AF5D1BEE8F831E041FD1937
sha3_384: 1db48565ec450a9c6d353a38673cd05c75384e9b843dc1950b2e4db5f41806cd32c3b323fec5b7e708ef9af2eb9e0002
ep_bytes: 875cc4f90002024fc3c774c4b8c643ae
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Win32:LdPinch-CLK [Trj] also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
Malwarebytes	MachineLearning/Anomalous.100%
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
APEX	Malicious
Kaspersky	Trojan-PSW.Win32.LdPinch.zie
Rising	HackTool.Obfuscator!8.236 (TFE:1:z8J7VgN61DH)
F-Secure	Trojan.TR/Patched.Ren.Gen
TrendMicro	TROJ_GEN.R03BC0RJT23
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.616bc40327ce78c9
Sophos	Mal/Basine-C
Ikarus	Trojan.Patched
Google	Detected
Avira	TR/Patched.Ren.Gen
Varist	W32/LdPinch.L.gen!Eldorado
Kingsoft	malware.kb.a.1000
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	TrojWare.Win32.PSW.Ldpinch.~NIR@1on3sd
ZoneAlarm	Trojan-PSW.Win32.LdPinch.zie
Cynet	Malicious (score: 100)
DeepInstinct	MALICIOUS
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BC0RJT23
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.22146.susgen
BitDefenderTheta	Gen:NN.ZexaF.36792.piZ@aKH5o9e
AVG	Win32:LdPinch-CLK [Trj]
Cybereason	malicious.54af2c
Avast	Win32:LdPinch-CLK [Trj]

How to remove Win32:LdPinch-CLK [Trj]?

Win32:LdPinch-CLK [Trj] removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X