How to remove "TrojanDownloader:MSIL/AgentTesla.ABKF!MTB"?

The TrojanDownloader:MSIL/AgentTesla.ABKF!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:MSIL/AgentTesla.ABKF!MTB virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine TrojanDownloader:MSIL/AgentTesla.ABKF!MTB?


File Info:
name: 254823AE181DC1018982.mlw
path: /opt/CAPEv2/storage/binaries/e5f0d6d0ee3d09999d96ffe3892960e200378077218d7ba7e110d0bc555e85d0
crc32: 7ADA5774
md5: 254823ae181dc101898203641f4d7652
sha1: b15ef141a593aefe50726113dedfc1007994e6b5
sha256: e5f0d6d0ee3d09999d96ffe3892960e200378077218d7ba7e110d0bc555e85d0
sha512: 0e19647908e177000517652f167439fc0a020b573528261d065c0400f5a9c4ad3aac40a49a130fc383a111d4a74e8d98b5137bfdf9bdca635f671954b808868d
ssdeep: 384:jlVJ5hjRE+Od/3Tncv7WYznN0c5k911iKL4oAptjUcNoWEaakrMVzY:R5huofnN0c5k9qW41jlb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D4722915BAAF9E22D66ACB3EC4DFE68407E8C7632953C90D70D623875DA37C9CE41240
sha3_384: 1a74b695ed2dbd32ad8c9b19ec1036a84d13afc623813b245ef5347993787a15de2cc9e9a392de78f97706f61b3d4a9a
ep_bytes: ff250020400000000000000000000000
timestamp: 2085-05-27 20:09:27

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: ikhj.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: ikhj.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

TrojanDownloader:MSIL/AgentTesla.ABKF!MTB also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Marsilia.18117
Skyhigh	RDN/Generic Downloader.x
McAfee	RDN/Generic Downloader.x
Malwarebytes	Trojan.MCrypt.MSIL.Generic
Zillya	Downloader.PsDownload.Win32.2129
Sangfor	Downloader.Msil.Psdownload.Vg5f
K7AntiVirus	Trojan-Downloader ( 0059dac61 )
Alibaba	Trojan:Win32/Leonem.e49d435d
K7GW	Trojan-Downloader ( 0059dac61 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Marsilia.D46C5
BitDefenderTheta	Gen:NN.ZemsilF.36802.bm0@aCyPBlb
VirIT	Trojan.Win32.MSIL_Heur.A
Symantec	MSIL.Downloader!gen7
tehtris	Generic.Malware
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.MPA
APEX	Malicious
TrendMicro-HouseCall	Trojan.MSIL.NEGASTEAL.DYSHRSKO
Kaspersky	HEUR:Trojan-Downloader.MSIL.PsDownload.gen
BitDefender	Gen:Variant.Marsilia.18117
NANO-Antivirus	Trojan.Win32.PsDownload.jumejy
Avast	Win32:RATX-gen [Trj]
Tencent	Malware.Win32.Gencirc.13bec1a2
Emsisoft	Gen:Variant.Marsilia.18117 (B)
F-Secure	Heuristic.HEUR/AGEN.1367580
VIPRE	Gen:Variant.Marsilia.18117
TrendMicro	Trojan.MSIL.NEGASTEAL.DYSHRSKO
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.254823ae181dc101
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Google	Detected
Avira	HEUR/AGEN.1367580
Varist	W32/MSIL_Kryptik.HJS.gen!Eldorado
Antiy-AVL	Trojan[Downloader]/MSIL.PsDownload
Kingsoft	win32.troj.undef.a
Microsoft	TrojanDownloader:MSIL/AgentTesla.ABKF!MTB
ZoneAlarm	HEUR:Trojan-Downloader.MSIL.PsDownload.gen
GData	Gen:Variant.Marsilia.18117
ALYac	Gen:Variant.Marsilia.18117
MAX	malware (ai score=86)
Cylance	unsafe
Panda	Trj/RnkBend.A
Zoner	Trojan.Win32.152545
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:SMjnxRNHh7bu5g7OiU9hKA)
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.73750922.susgen
Fortinet	MSIL/Agent.OMQ!tr
AVG	Win32:RATX-gen [Trj]
DeepInstinct	MALICIOUS