What is "Trojan:MSIL/AgentTesla.AMK!MSR"?

The Trojan:MSIL/AgentTesla.AMK!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/AgentTesla.AMK!MSR virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:MSIL/AgentTesla.AMK!MSR?


File Info:
crc32: 29478EEE
md5: 6ed6799fa820e2c3a50b6fae8cea00c7
name: upload_file
sha1: 3ac9529a7e4472658adbf0f208cdb0250793f5a7
sha256: 42a35c010a543435698dcb69c82b5388e4b91727ee147b9acc60679f4ea1626c
sha512: 1f52326fe739f3dde41bc6f2bbcc06235ff020637a6ff66b509d316cf3fb9099a84fd68c92bedf5ba3478941e8423f3ee373420ccd542cd1a1a9be434c655de0
ssdeep: 12288:ogOLRgWowOgjExytLv5ex/PUD3wfF9+Zp9CTIqrnhfeGxeOTFhFFV1ctsgiqQT1:QLUTg2umqdZp0T7bh1xPxh3VKIS
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2014 Patchi
Assembly Version: 15.0.0.0
InternalName: Zx67e.exe
FileVersion: 15.0.0.0
CompanyName: 
LegalTrademarks: Patchi
Comments: Cadbury Gifts Direct.
ProductName: Toblerone
ProductVersion: 15.0.0.0
FileDescription: Toblerone
OriginalFilename: Zx67e.exe

Trojan:MSIL/AgentTesla.AMK!MSR also known as:

Elastic	malicious (high confidence)
McAfee	PWS-FCRK!6ED6799FA820
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 00570dcb1 )
BitDefender	Trojan.GenericKD.34751180
K7GW	Trojan ( 00570dcb1 )
Arcabit	Trojan.Generic.D21242CC
Invincea	Mal/Generic-S
Cyren	W32/MSIL_Troj.YY.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.YDO
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.MSIL.Taskun.gen
MicroWorld-eScan	Trojan.GenericKD.34751180
Ad-Aware	Trojan.GenericKD.34751180
Emsisoft	Trojan.GenericKD.34751180 (B)
Comodo	TrojWare.Win32.Genome.rdapw@0
DrWeb	Trojan.Packed2.42621
McAfee-GW-Edition	Artemis!Trojan
MaxSecure	Trojan.Malware.300983.susgen
FireEye	Generic.mg.6ed6799fa820e2c3
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Crypt
Microsoft	Trojan:MSIL/AgentTesla.AMK!MSR
ZoneAlarm	HEUR:Trojan.MSIL.Taskun.gen
GData	MSIL.Trojan-Stealer.Telegrambot.TH81NL
AhnLab-V3	Trojan/Win32.Inject.C4205699
ALYac	Spyware.AgentTesla
MAX	malware (ai score=86)
Malwarebytes	Trojan.MalPack
Panda	Trj/GdSda.A
SentinelOne	DFI – Malicious PE
Fortinet	MSIL/Kryptik.YDO!tr
BitDefenderTheta	Gen:NN.ZemsilF.34298.Wm0@aulXycb
AVG	Win32:MalwareX-gen [Trj]
Avast	Win32:MalwareX-gen [Trj]
CrowdStrike	win/malicious_confidence_70% (W)
Qihoo-360	Win32/Trojan.c96

How to remove Trojan:MSIL/AgentTesla.AMK!MSR?

Trojan:MSIL/AgentTesla.AMK!MSR removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Trojan:MSIL/AgentTesla.AMK!MSR”?