Categories: Trojan

How to remove “Trojan:Win32/Redline.GMH!MTB”?

The Trojan:Win32/Redline.GMH!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Redline.GMH!MTB virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the RedLine malware family
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/Redline.GMH!MTB?


File Info:
name: 18558101082D3D9DD095.mlwpath: /opt/CAPEv2/storage/binaries/ca9a53642fbfd28d06437780b6e480af7ca9007340f1cdabdc39c0fd54e0a896crc32: D939A4A6md5: 18558101082d3d9dd0959b2504f1456fsha1: 85f1822fe00baa0e7e49a2a848f174b4c65d219asha256: ca9a53642fbfd28d06437780b6e480af7ca9007340f1cdabdc39c0fd54e0a896sha512: 865da52287f266cb7c45de2f563a7ff805e3e8adfcf6cfe3fa1431b41370efb21c2cc63f7a6a01d8d013d34bccae50bb255030a0fd5832b8d370341d4c904071ssdeep: 24576:eyrFXflzuanEzo0LfKArhLrEJH+0jd+i9dM60DuW:1zuanEzNLC041VdMUWtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1DB957C3D7B869265ECE600FA86FC7921C11EE0B01B2789E7D68517EF86105E13B3578Esha3_384: ed1b910ff9f7c9de622b3b1dce85e980398a8a660305d64cfb104fe3fe92a2dc5ec3524d138abe45587bb0a7c1b2f9b6ep_bytes: e93f5d0400e976a00600e9174d0100e9timestamp: 2023-08-31 14:23:53
Version Info:
0: [No Data]

Trojan:Win32/Redline.GMH!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Stealer.12!c
MicroWorld-eScan	Gen:Variant.Lazy.384967
ClamAV	Win.Packed.Pwsx-10008461-0
FireEye	Gen:Variant.Lazy.384967
ALYac	Gen:Variant.Lazy.384967
Malwarebytes	Spyware.RedLineStealer
Zillya	Trojan.Stealer.Win32.141924
Sangfor	Infostealer.Win32.Kryptik.Vicy
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanSpy:Win32/Stealer.2dc95856
K7GW	Trojan ( 005aaa221 )
K7AntiVirus	Trojan ( 005aaa221 )
VirIT	Trojan.Win32.GenusT.DQLR
Cyren	W32/Stealer.EY.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HUBU
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.pef
BitDefender	Gen:Variant.Lazy.384967
NANO-Antivirus	Trojan.Win32.Stealer.jziccz
Avast	Win32:CrypterX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10bf1a29
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/AD.RedLineSteal.xdwsi
DrWeb	Trojan.PWS.RedLineNET.6
VIPRE	Gen:Variant.Lazy.384967
TrendMicro	TrojanSpy.Win32.REDLINE.YXDIEZ
McAfee-GW-Edition	BehavesLike.Win32.Generic.tt
Emsisoft	Gen:Variant.Lazy.384967 (B)
GData	Gen:Variant.Lazy.384967
Jiangmin	TrojanSpy.Stealer.ailb
Webroot
Avira	TR/AD.RedLineSteal.xdwsi
Antiy-AVL	Trojan/Win32.Sabsik
Arcabit	Trojan.Lazy.D5DFC7
ZoneAlarm	HEUR:Trojan-Spy.Win32.Stealer.pef
Microsoft	Trojan:Win32/Redline.GMH!MTB
Google	Detected
AhnLab-V3	Infostealer/Win.Injection.C5479143
McAfee	Artemis!18558101082D
MAX	malware (ai score=80)
VBA32	BScope.TrojanPSW.RedLine
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TrojanSpy.Win32.REDLINE.YXDIEZ
Rising	Backdoor.Agent!8.C5D (TFE:5:csL1B5VX1TF)
Yandex	Trojan.Kryptik!K1xurUBGYTU
Ikarus	Trojan.Win32.Redline
MaxSecure	Trojan.Malware.73793603.susgen
Fortinet	W32/Kryptik.HUBU!tr
BitDefenderTheta	Gen:NN.ZexaF.36738.0PW@a0F!fXei
AVG	Win32:CrypterX-gen [Trj]
DeepInstinct	MALICIOUS