Trojan

Trojan:MSIL/AgentTesla.BXB!MTB removal tips

Malware Removal

The Trojan:MSIL/AgentTesla.BXB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:MSIL/AgentTesla.BXB!MTB virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan:MSIL/AgentTesla.BXB!MTB?


File Info:

crc32: 8B9F47AF
md5: c2f754713ba4def023364a79158443c2
name: C2F754713BA4DEF023364A79158443C2.mlw
sha1: fd0ec3efd3f5db588899fabf68e50658af101814
sha256: b05e9e886e3f8e3ec8e0174ac8139d976287d335e71090af314f86a686fea115
sha512: 0f6b889b2484e2ed59f95f9a5cd7822585162011869085fb3c37b82e15588926f0e3358fbf53b1121df35688116a878a17d2b6b1d5df984e602218f3abded557
ssdeep: 49152:luLXtDDwUO10AU+jqvk4OYBYgTKp8moaig9RSSewyeT:lu7tDsJU+WM4z8peI9RS2yQ
type: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: loader.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: loader.exe

Trojan:MSIL/AgentTesla.BXB!MTB also known as:

K7AntiVirusTrojan ( 0057c4d71 )
Elasticmalicious (high confidence)
DrWebTrojan.PackedNET.721
CynetMalicious (score: 100)
ALYacGen:Variant.Bulz.474543
SangforSuspicious.Win32.Save.a
AlibabaTrojan:MSIL/AgentTesla.e9f57352
K7GWTrojan ( 0057c4d71 )
Cybereasonmalicious.13ba4d
CyrenW64/MSIL_Troj.BCG.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/Kryptik.AAWE
APEXMalicious
AvastWin64:CoinminerX-gen [Trj]
KasperskyHEUR:Trojan.MSIL.Dizemp.gen
BitDefenderGen:Variant.Bulz.474543
NANO-AntivirusTrojan.Win64.Dizemp.iwobxp
MicroWorld-eScanGen:Variant.Bulz.474543
TencentMsil.Trojan.Dizemp.Szvb
Ad-AwareGen:Variant.Bulz.474543
SophosMal/Generic-S
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0DFG21
McAfee-GW-EditionBehavesLike.Win64.VirRansom.vc
FireEyeGeneric.mg.c2f754713ba4def0
EmsisoftGen:Variant.Bulz.474543 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Kryptik.dztgz
eGambitUnsafe.AI_Score_98%
MicrosoftTrojan:MSIL/AgentTesla.BXB!MTB
ArcabitTrojan.Bulz.D73DAF
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Bulz.474543
AhnLab-V3Trojan/Win.Generic.C4504547
McAfeeAgentTesla-FDCZ!C2F754713BA4
MAXmalware (ai score=85)
VBA32Trojan.MSIL.Dizemp
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0DFG21
IkarusTrojan.MSIL.Crypt
MaxSecureTrojan.Malware.100993507.susgen
FortinetMSIL/GenKryptik.FFBT!tr
AVGWin64:CoinminerX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan:MSIL/AgentTesla.BXB!MTB?

Trojan:MSIL/AgentTesla.BXB!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment