Categories: Trojan

How to remove “TrojanDownloader:MSIL/AgentTesla.ABKF!MTB”?

The TrojanDownloader:MSIL/AgentTesla.ABKF!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:MSIL/AgentTesla.ABKF!MTB virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine TrojanDownloader:MSIL/AgentTesla.ABKF!MTB?


File Info:
name: 254823AE181DC1018982.mlwpath: /opt/CAPEv2/storage/binaries/e5f0d6d0ee3d09999d96ffe3892960e200378077218d7ba7e110d0bc555e85d0crc32: 7ADA5774md5: 254823ae181dc101898203641f4d7652sha1: b15ef141a593aefe50726113dedfc1007994e6b5sha256: e5f0d6d0ee3d09999d96ffe3892960e200378077218d7ba7e110d0bc555e85d0sha512: 0e19647908e177000517652f167439fc0a020b573528261d065c0400f5a9c4ad3aac40a49a130fc383a111d4a74e8d98b5137bfdf9bdca635f671954b808868dssdeep: 384:jlVJ5hjRE+Od/3Tncv7WYznN0c5k911iKL4oAptjUcNoWEaakrMVzY:R5huofnN0c5k9qW41jlbtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D4722915BAAF9E22D66ACB3EC4DFE68407E8C7632953C90D70D623875DA37C9CE41240sha3_384: 1a74b695ed2dbd32ad8c9b19ec1036a84d13afc623813b245ef5347993787a15de2cc9e9a392de78f97706f61b3d4a9aep_bytes: ff250020400000000000000000000000timestamp: 2085-05-27 20:09:27
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: FileVersion: 1.0.0.0InternalName: ikhj.exeLegalCopyright: LegalTrademarks: OriginalFilename: ikhj.exeProductName: ProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

TrojanDownloader:MSIL/AgentTesla.ABKF!MTB also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Marsilia.18117
Skyhigh	RDN/Generic Downloader.x
McAfee	RDN/Generic Downloader.x
Malwarebytes	Trojan.MCrypt.MSIL.Generic
Zillya	Downloader.PsDownload.Win32.2129
Sangfor	Downloader.Msil.Psdownload.Vg5f
K7AntiVirus	Trojan-Downloader ( 0059dac61 )
Alibaba	Trojan:Win32/Leonem.e49d435d
K7GW	Trojan-Downloader ( 0059dac61 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Marsilia.D46C5
BitDefenderTheta	Gen:NN.ZemsilF.36802.bm0@aCyPBlb
VirIT	Trojan.Win32.MSIL_Heur.A
Symantec	MSIL.Downloader!gen7
tehtris	Generic.Malware
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.MPA
APEX	Malicious
TrendMicro-HouseCall	Trojan.MSIL.NEGASTEAL.DYSHRSKO
Kaspersky	HEUR:Trojan-Downloader.MSIL.PsDownload.gen
BitDefender	Gen:Variant.Marsilia.18117
NANO-Antivirus	Trojan.Win32.PsDownload.jumejy
Avast	Win32:RATX-gen [Trj]
Tencent	Malware.Win32.Gencirc.13bec1a2
Emsisoft	Gen:Variant.Marsilia.18117 (B)
F-Secure	Heuristic.HEUR/AGEN.1367580
VIPRE	Gen:Variant.Marsilia.18117
TrendMicro	Trojan.MSIL.NEGASTEAL.DYSHRSKO
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.254823ae181dc101
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Google	Detected
Avira	HEUR/AGEN.1367580
Varist	W32/MSIL_Kryptik.HJS.gen!Eldorado
Antiy-AVL	Trojan[Downloader]/MSIL.PsDownload
Kingsoft	win32.troj.undef.a
Microsoft	TrojanDownloader:MSIL/AgentTesla.ABKF!MTB
ZoneAlarm	HEUR:Trojan-Downloader.MSIL.PsDownload.gen
GData	Gen:Variant.Marsilia.18117
ALYac	Gen:Variant.Marsilia.18117
MAX	malware (ai score=86)
Cylance	unsafe
Panda	Trj/RnkBend.A
Zoner	Trojan.Win32.152545
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:SMjnxRNHh7bu5g7OiU9hKA)
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.73750922.susgen
Fortinet	MSIL/Agent.OMQ!tr
AVG	Win32:RATX-gen [Trj]
DeepInstinct	MALICIOUS