PSW.LdPinch - Spyware Detector - Max Secure Software

Spyware free software spyware removal Anti Spyware software free spyware check adware spyware remover anti virus download

Home/ Spyware Encyclopedia / PSW.LdPinch

PSW.LdPinch Technical Details

Category

PSW

Discovered

3/3/2008 15:15:00 PM

Modified

7/5/2008 17:37:00 PM

Threat Level

Critical

Description

This family of Trojans steal passwords, normally system passwords from victim machines. They search for system files which contain confidential information such as passwords and Internet access telephone numbers and then send this information to an email address coded into the body of the Trojan. The ‘master’ or user of the illegal program will then retrieve and misuse this information..Most common behavior:1. Ask for password using fake window2. Change ICQ, MSN, AOL configuration3.Get cached Windows passwords.

Summary

The hosts file was updated with the following url-to-ip mappings: N/A
The following http urls were started: N/A
Generated smtp traffic: N/A
Connection(s) established with remote IRC Server: n/a
The following hidden entries created:
%SYSDIR%\msudp4.sys
%SYSDIR%\tcpg4t.dll
The following internet connection was established: N/A

When the PSW is executed, it creates the following files:

Name	Version	Publisher	Signature (MD5)	File Size (in Bytes)
..\csrss.exe			eeccf2462ab61ed8166760455f486279	86016
..\system\ati.exe			f269545630b9f47a4789ff8577ae339f	103936
..\desktop.exe			dfb5ed936e10682b9697caf548d9b45b	13379
..\08193600.exe			726fbc5cc394a1b94640051150b12110	56935
..\ac157b97.exe			74d7d7d101273474a306198f4fda50bc	46080
..\f6fad5bd.exe			f0408d0e291f7b5bf3d66db781c49ef1	4560
..\ff9ad453.exe			f401385a30445e8b48b237cf6f4a922a	346094
..\d69a6f33.exe			f269545630b9f47a4789ff8577ae339f	103936
..\d284bfe6.exe			7da7683908e2cd42b220090bee9b4395	274432
..\cc38726f.exe			f0c45b12db322fd2322023629c79c0c7	29251
..\temp\~18.tmp.exe			3b8b86e59b19d490c3850374ade552f7
..\temp \101984264127102885372132.exe			4c125f94af15074df31965b6445a1197	69120
..\temp\111111111.exe			33a25cdb5612fb0041c104005faa551a	107520
..\temp\123pack.exe			c757415649133edf150a22ce548fffa7	36352
..\temp\161e739a.exe			3b65138b3c9d5054084ac03fa7485272	34816
..\temp\249226274240.exe	4.0.7.0	macromedia, inc.	153ed1ea8cbcc3b3497ee2c8eff48f8c	1253943
..\temp\2b24c9ec.exe			16db683a7e44695d4bac748369493281	34304
..\temp\3.exe			d6da31b418b79a2af537eb990269e409	48057
..\temp\anti.exe			a9a00c411625053fbbfb48999d5257f0	32256
..\temp\asdase.exe			4c49b39302cce5b403bcdb4237cfafdf	10240
..\temp\b_artego.exe			dfb5ed936e10682b9697caf548d9b45b	13379
..\temp\bot.exe			77461f5e758c810d9c464874be12a832	10752
..\temp\cb.exe			2d7b500c1a1b130041ba19a05418f0af	7168
..\temp\fgf.exe			e443ad2e6a445cf9b9954d8cb6d95d26	54394
..\temp\file.exe			10517e175de2c1d1d4487bb2930c7a29	32256

When the PSW is executed, it creates the following Registry entries:

•	..\software\microsoft\windows\currentversion\run\"main"
•	..\software\microsoft\windows\currentversion\runonce\"ati"
•	..\software\microsoft\windows\currentversion\policies\explorer\run\"mstask"
•	..\software\microsoft\windows\currentversion\run\"msrdtscf"
•	..\software\microsoft\windows\currentversion\uninstall\netscream_is1

Recommendation to remove PSW.LdPinch

Spyware Detector can remove PSW.LdPinch, and thousands of other Spyware definitions, automatically and instantly. Click here to download Spyware Detector and scan for free.

	Personalized e-Mail support by our Research Team. You send an "Export Log" report to us, we then add new definition and you eliminate spyware found on YOUR PC in the next Live Update. So, not only do you benefit but the whole community enjoys the feedback.

	Speed up your computer and increase browsing performance by deleting Spyware & Adware

	Enjoy continuous protection and security with frequent spyware definition updates so you never have to worry about new threats and outdated software.

	Surf the web with confidence knowing your online activities aren't being tracked, and your confidential data is secure from prying eyes.

Search Threats

Testimonials

Information Desk

	Spyware & Adware Categories we scan

	List of Spyware & Adware we remove


	Submit a Threat Submit a threat to be reviewed by our research team Submit a Threat