Is Trojan.PSW.LdPinch harmful for my PC?

Is Trojan.PSW.LdPinch harmful for my PC?

Ahoy mates,

Trojan.PSW.LdPinch is a password stealer. What it does is, it steals your passwords, usually the ones that you enter in your Internet browser. So, to answer your question, Yes! It's harmful in some ways. One such way is, the Trojan will send your email username and password to a server (the ones who made this Trojan), and most likely they will log in to your email and spam other people in your contacts. You don't want this to happen.

Be careful when you're downloading manipulated or illegal Software as many of them contain Malware. Read reviews from other people (who downloaded the same software from the same website) first before you download them.

It's still better to buy an original one.

Is Trojan.PSW.LdPinch harmful for my PC?

According to F-Secure, a Finnish cyber security and privacy company based in Helsinki, Finland, it is a password-stealing Trojan horse virus with backdoor and proxy capabilities that was discovered on December 15, 2004. They renamed the “Damrai.A” virus into “LdPinch.ht” because the Trojan also has password stealing capabilities. The Trojan is a worm that infects 32-bit operating systems and known in the following names:

• Trojan-PSW.Win32.LdPinch.ht
• Backdoor.Damrai.A
• Damrai.A
• Trojan-PSW.Win32.PdPinch.e

In Germany, it was spammed widely in a message that contained an attachment called “telekom-rechnung.chm” which contains two files: “open.exe” and a tiny HTML file that tries to execute the other file (open.exe) which uses the vulnerability in Microsoft Internet Explorer. The actual Trojan horse virus is contained in the “open.exe” file.

When the EXE file is started, it will first disable two services: one belonging to the antivirus and the other to the firewall.

• kavsvc
• outpostfirewall

After that, the Trojan initiates several threads where one of the threads tracks and kills processes if their names contain any of the following substrings:

• outpost.exe
• VSMON.exe
• ZAPRO.exe
• APVDWIN.exe
• PAVSRV51.exe
• NOD32KUI.exe
• avpcc.exe
• defwatch.exe

The Trojan then creates shortcuts to the “Favorites” menu of Microsoft Internet Explorer and Windows Explorer to the following websites:

• xakepy.ru
• carotid.ru

More information at TROJAN.PSW.LDPINCH.HT Threat Description.