Trojan

Trojan:MSIL/AgentTesla.BPK!MTB removal instruction

Malware Removal

The Trojan:MSIL/AgentTesla.BPK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/AgentTesla.BPK!MTB virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Trojan:MSIL/AgentTesla.BPK!MTB?



File Info:

crc32: 4ADCE35F
md5: 7f1483c632899403b6faafaa48ff6737
name: 7F1483C632899403B6FAAFAA48FF6737.mlw
sha1: 2aef69fecfee7e55e8a3593135b728cc0f28cb46
sha256: aaac88ee06cc1ac4517a21b6cf1350a69ee8f87a3fcacf94671ba9668a098c3d
sha512: a8eae69cc25fc41f175b57339c50da0726c3634760d0e3f718b1a9a3fa4cf91b0f24763c3bde7fb06631c48802326af76c9c3cdb2dc3a90badd69b27857a17f9
ssdeep: 24576:OLBFARhCh0hJhphVh4hhhAh6SeH262y7hvbBW+hHXvhXhAhA:OPuhCh0hJhphVh4hhhAh6Pyy7hvb0+h
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: 571alA7tn3C.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: x41cx435x434 x441x43ax43bx430x434
ProductVersion: 1.0.0.0
FileDescription: x41cx435x434 x441x43ax43bx430x434
OriginalFilename: 571alA7tn3C.exe

Trojan:MSIL/AgentTesla.BPK!MTB also known as:

K7AntiVirusRiskware ( 0040eff71 )
Elasticmalicious (high confidence)
DrWebTrojan.PackedNET.800
ALYacSpyware.AgentTesla
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanSpy:MSIL/Kryptik.f523266f
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.ecfee7
CyrenW32/Trojan.NVHW-4510
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/Kryptik.ABPY
APEXMalicious
AvastWin32:PWSX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Spy.MSIL.Noon.gen
BitDefenderTrojan.GenericKD.37138012
SophosMal/Generic-S + Troj/TeslaA-BIT
BitDefenderThetaGen:NN.ZemsilF.34758.in0@aqCjRig
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.7f1483c632899403
SentinelOneStatic AI – Malicious PE
AviraTR/Kryptik.qkfah
KingsoftWin32.PSWTroj.Undef.(kcloud)
MicrosoftTrojan:MSIL/AgentTesla.BPK!MTB
ArcabitTrojan.Generic.D236AE5C
ZoneAlarmHEUR:Trojan-Spy.MSIL.Noon.gen
GDataTrojan.GenericKD.37138012
AhnLab-V3Trojan/Win.Generic.C4533220
McAfeeGenericRXOZ-XI!7F1483C63289
MAXmalware (ai score=86)
VBA32CIL.HeapOverride.Heur
MalwarebytesTrojan.MalPack
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.F0D1C00FN21
IkarusTrojan.MSIL.Inject
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.ABOZ!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan:MSIL/AgentTesla.BPK!MTB?

Trojan:MSIL/AgentTesla.BPK!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment