Trojan:Win32/Midie.GMH!MTB removal instruction

The Trojan:Win32/Midie.GMH!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Midie.GMH!MTB virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Trojan:Win32/Midie.GMH!MTB?


File Info:
name: 328AE6CB65F7E2FBA2BB.mlw
path: /opt/CAPEv2/storage/binaries/2478b645e93f21302c0a7a22f7faf6466f1e62d47339032729f66703a6fd5995
crc32: FC2CD12E
md5: 328ae6cb65f7e2fba2bb7118c8c2f72e
sha1: 62fba2837ab1bd2a196c49700db6bf140d930ce3
sha256: 2478b645e93f21302c0a7a22f7faf6466f1e62d47339032729f66703a6fd5995
sha512: d2e75e8623de6b30eba3c108a2ab06847797ceef9fb6584b77caec0d8ad4f13196c950499435225c105c9c4804dc1df5166b40f284674bcc680cd3dad41173b5
ssdeep: 768:RD+M0tdSwiLNlwjUXve2mKfnBUiE6KsbJncwR3i:l+M04LPwavhffneMR3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T148337D063EC1C473C40644742932C2E16A7E7A1116A5929FBF9457EEAF723D0DF362BA
sha3_384: 998e2cf102dd24e446c7a678d6fb6bbff82eda0dcd843b5814b91ab60f59e3ffaa359188d5a79438d18d12645e8af941
ep_bytes: e85d2b0000e979feffff8bff558bec81
timestamp: 2023-06-28 02:19:36

Version Info:
0: [No Data]

Trojan:Win32/Midie.GMH!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Aeux.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
FireEye	Gen:Variant.Midie.125664
ALYac	Gen:Variant.Midie.125664
Malwarebytes	Malware.AI.3727411217
VIPRE	Gen:Variant.Midie.125664
Sangfor	Trojan.Win32.Agent.Vbte
K7AntiVirus	Riskware ( 00584baa1 )
K7GW	Riskware ( 00584baa1 )
BitDefenderTheta	Gen:NN.ZexaF.36722.duW@aeUX63gj
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent.AFRA
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Snake.gen
BitDefender	Gen:Variant.Midie.125664
NANO-Antivirus	Trojan.Win32.Snake.jzbitp
MicroWorld-eScan	Gen:Variant.Midie.125664
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10bf19a2
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Redcap.apsdz
TrendMicro	TROJ_GEN.R002C0DFU23
McAfee-GW-Edition	BehavesLike.Win32.Generic.qh
Emsisoft	Gen:Variant.Midie.125664 (B)
Ikarus	Trojan.Win32.Agent
GData	Gen:Variant.Midie.125664
Avira	TR/Redcap.apsdz
Antiy-AVL	Trojan/Win32.Wacatac
Kingsoft	Win32.Troj.Undef.a
Arcabit	Trojan.Midie.D1EAE0
ZoneAlarm	HEUR:Trojan.Win32.Snake.gen
Microsoft	Trojan:Win32/Midie.GMH!MTB
Google	Detected
AhnLab-V3	Trojan/Win.Leonem.C5447480
MAX	malware (ai score=83)
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0DFU23
Rising	Trojan.Generic@AI.95 (RDML:i+tSVQYsftBgGBJSP5uaPA)
MaxSecure	Trojan.Malware.210918067.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Trojan:Win32/Midie.GMH!MTB?

Trojan:Win32/Midie.GMH!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X