Trojan

Trojan:MSIL/AgentTesla.AEG!MTB removal

Malware Removal

The Trojan:MSIL/AgentTesla.AEG!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/AgentTesla.AEG!MTB virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:MSIL/AgentTesla.AEG!MTB?



File Info:

name: 6A63B71ACFD3DEF4F705.mlw
path: /opt/CAPEv2/storage/binaries/94938f5bb66fc984f2dc9ad4015ec364fcc87c4cac1f470daa470e684c8b96da
crc32: 4E639C9E
md5: 6a63b71acfd3def4f7054851af1fc5f4
sha1: c5af9f17ab053b99abd1a787ae764c0f5373f086
sha256: 94938f5bb66fc984f2dc9ad4015ec364fcc87c4cac1f470daa470e684c8b96da
sha512: dfe336bedfc66db1d7d439ce0fe1e79106733703bc9c1b55b6e85507c1f8585c96a93c7bd46aeef647703c80dcaaae4ad5ef6050ab8c5bfd0ee5305a8c8c798d
ssdeep: 6144:gLMgJWDNjyxyCq2NpLWhvEx3f0/FZSU80Rz7qJJcEzasZxNQ5pqOhpRRRRRER:gLgxjyxy1+xWtk3s/DSm2/ZVIMkRRRR6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DE74021A7BEEA351CEBD07FAA466010483B966454932F7591CCAF0CF8973F028289777
sha3_384: e82aa4b13133b75dc1f20cb573cc15f348e96b3f662f7b9387bbaed4f7a5274ebb2696edee0f648dfd0b97d94254a960
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-01-17 09:17:20


Version Info:

Translation: 0x0000 0x04b0
Comments: 
CompanyName: Razer Inc.
FileDescription: RazerInstaller
FileVersion: 1.0.0.0
InternalName: IContextAttribu.exe
LegalCopyright: Copyright ©  2021 Razer Inc. All rights reserved.
LegalTrademarks: 
OriginalFilename: IContextAttribu.exe
ProductName: RazerInstaller
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan:MSIL/AgentTesla.AEG!MTB also known as:

LionicTrojan.MSIL.Agensla.i!c
CynetMalicious (score: 100)
FireEyeGeneric.mg.6a63b71acfd3def4
McAfeeRDN/Generic PWS.y
CylanceUnsafe
SangforInfostealer.MSIL.Agensla.gen
K7AntiVirusTrojan ( 0058d1c81 )
K7GWTrojan ( 0058d1c81 )
Cybereasonmalicious.7ab053
CyrenW32/MSIL_Kryptik.GKF.gen!Eldorado
SymantecScr.Malcode!gdn34
ESET-NOD32Win32/Formbook.AA
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Packed.Pwsx-9936836-0
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefenderTrojan.GenericKD.38558004
MicroWorld-eScanTrojan.GenericKD.38558004
AvastWin32:PWSX-gen [Trj]
EmsisoftTrojan.Crypt (A)
DrWebTrojan.Hosts.49477
ZillyaTrojan.Formbook.Win32.2741
TrendMicroTROJ_GEN.R002C0RAH22
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
SophosMal/Generic-S + Troj/MSIL-SDM
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Dropper
AviraTR/AD.Swotter.yttss
MAXmalware (ai score=100)
Antiy-AVLTrojan[PSW]/MSIL.Agensla
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:MSIL/AgentTesla.AEG!MTB
ViRobotTrojan.Win32.Z.Pwsx.365056
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
GDataTrojan.GenericKD.38558004
AhnLab-V3Trojan/Win.Generic.C4918253
ALYacTrojan.GenericKD.38558004
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.MalPack.PNG.Generic
TrendMicro-HouseCallTROJ_GEN.R002C0RAH22
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL:7d0aY1L88G8l4fHykIxxbQ)
YandexTrojan.Igent.bXj7HB.23
IkarusTrojan.MSIL.Inject
MaxSecureTrojan.Malware.74499699.susgen
FortinetMSIL/Kryptik.IY!tr
AVGWin32:PWSX-gen [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan:MSIL/AgentTesla.AEG!MTB?

Trojan:MSIL/AgentTesla.AEG!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment