Trojan

Trojan.Win32.Mimdau.vho malicious file

Malware Removal

The Trojan.Win32.Mimdau.vho is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Mimdau.vho virus can do?

  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine Trojan.Win32.Mimdau.vho?


File Info:

crc32: 30CDA1A7
md5: 761e713f3cbb3b75f59fdda70f892970
name: 761E713F3CBB3B75F59FDDA70F892970.mlw
sha1: d12d807120a9cf044fb7d41b4d41e9e6386ee6a0
sha256: b292e33cac5344b26ecde902302b482b2e416812c1ff13d39d24fb0e6a1dcf1a
sha512: 9d5833ca7e14d4e1b6817236e1fa3975c803a1f8478500a9f1f95634ffa138bc15be31ccefc735bf2f75af06d54d77255bbe323a6b6364b493133a71599ca560
ssdeep: 12288:ie/0D3jvRUTDY0JQYnQ6lBar0+a9tQjClRgGaJklxuS9dpxOtpk+:ie8D3jZUTDhQYndca9tQ+XamlxuqdT+
type: PE32 executable (console) Intel 80386, for MS Windows, UPX compressed

Version Info:

LegalCopyright: (c) Microsoft Corporation. All rights reserved.
InternalName: winaudio.exe
FileVersion: 1.0.0.1
CompanyName: Microsoft Corporation
ProductName: winaudio.exe
ProductVersion: 1.0.0.1
FileDescription: winaudio.exe
OriginalFilename: winaudio.exe
Translation: 0x0409 0x04b0

Trojan.Win32.Mimdau.vho also known as:

Elasticmalicious (high confidence)
ClamAVWin.Malware.Trojanx-9870359-0
McAfeeGenericRXAA-AA!761E713F3CBB
ZillyaTrojan.Agent.Win32.2170729
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan ( 005776e01 )
K7AntiVirusTrojan ( 005776e01 )
BitDefenderThetaGen:NN.ZexaF.34236.KmMfaWDRLNgj
CyrenW32/Agent.CHX.gen!Eldorado
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Mimdau.vho
NANO-AntivirusTrojan.Win32.Mimdau.iwhite
MicroWorld-eScanGen:Variant.Graftor.962297
TencentMalware.Win32.Gencirc.10ce59da
Ad-AwareGen:Variant.Graftor.962297
SophosTroj/Agent-BGQT
ComodoMalware@#1n6ljypfje6fs
DrWebTrojan.DownLoader39.20590
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Fake.hc
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Mimdau.bt
AviraHEUR/AGEN.1142358
ArcabitTrojan.Graftor.DEAEF9
ZoneAlarmHEUR:Trojan.Win32.Mimdau.vho
MicrosoftTrojan:Win32/Wacatac.B!ml
AhnLab-V3Trojan/Win.Generic.R434216
VBA32BScope.Trojan.Mimdau
MalwarebytesTrojan.Crypt
PandaTrj/Genetic.gen
YandexTrojan.Mimdau!9wP1N+2ormM
IkarusTrojan.Win32.Agent
MaxSecureTrojan.Malware.104417502.susgen
FortinetW32/Agent.ULI!tr
AVGWin32:TrojanX-gen [Trj]

How to remove Trojan.Win32.Mimdau.vho?

Trojan.Win32.Mimdau.vho removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment