Alert level: High
WinNT/Ldpinch is a rootkit driver that is dropped by some variants of Win32/Ldpinch.
Win32/Ldpinch is a family of password-stealing trojans. This trojan gathers private user data such as passwords from the host computer and sends the data to the attacker at a preset e-mail address. The Win32/Ldpinch trojans use their own Simple Mail Transfer Protocol (SMTP) engine or a web-based proxy for sending the e-mail, thus copies of the sent e-mail will not appear in the affected user's e-mail client.
Artikelnummer: 4028494 – Letzte Überarbeitung: 28.07.2017 – Revision: 1