Trojan:MSIL/AgentTesla.FK!MTB removal

The Trojan:MSIL/AgentTesla.FK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/AgentTesla.FK!MTB virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Trojan:MSIL/AgentTesla.FK!MTB?


File Info:
crc32: 550D44B2
md5: 61a87481dcf96634b63b79fa371eddd0
name: 61A87481DCF96634B63B79FA371EDDD0.mlw
sha1: 76182ed7c6a7f25f58df593b6cf5d4fbed646883
sha256: 9582773d5b96f91e3d5165dc8065a6491cb7927fb466b3929fd5f426e276b888
sha512: 39a8a2d03dcc13033173529ecafde65a4a91cfa6cf752ba2ed48c9d2f44254c95162c1b3f4090add0f94084b97888b90c649f4728290ee43426d1f520cdeb24d
ssdeep: 192:ZIOWy+8tjQMndpi2u7kQ0ceV2fgfVBnSFn89aW/:/3a2u4DfVdSF8AW
type: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: dinozavrik-watchdog.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: dinozavrik-watchdog.exe

Trojan:MSIL/AgentTesla.FK!MTB also known as:

K7AntiVirus	Trojan ( 0057c5721 )
Lionic	Trojan.MSIL.Cryptos.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.PackedNET.721
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.46404711
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/AgentTesla.37feb01b
K7GW	Trojan ( 0057c5721 )
Cyren	W64/Trojan.BXOC-4653
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Kryptik.AAWO
APEX	Malicious
Avast	Win64:CoinminerX-gen [Trj]
Kaspersky	VHO:Trojan.MSIL.Cryptos.gen
BitDefender	Trojan.GenericKD.46404711
MicroWorld-eScan	Trojan.GenericKD.46404711
Tencent	Msil.Trojan.Cryptos.Wnwi
Ad-Aware	Trojan.GenericKD.46404711
Sophos	ML/PE-A + Troj/Kryptik-XQ
Comodo	Malware@#3dvmjnd40j1wc
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0DF221
McAfee-GW-Edition	BehavesLike.Win64.Infected.lh
FireEye	Generic.mg.61a87481dcf96634
Emsisoft	Trojan.GenericKD.46404711 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Kryptik.uptod
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:MSIL/AgentTesla.FK!MTB
GData	Trojan.GenericKD.46404711
AhnLab-V3	Trojan/Win.Generic.C4463109
McAfee	Artemis!61A87481DCF9
MAX	malware (ai score=89)
VBA32	Trojan.MSIL.Cryptos
TrendMicro-HouseCall	TROJ_GEN.R002C0DF221
Ikarus	Trojan.MSIL.Crypt
MaxSecure	Trojan.Malware.9817250.susgen
Fortinet	MSIL/GenKryptik.FFBT!tr
AVG	Win64:CoinminerX-gen [Trj]

How to remove Trojan:MSIL/AgentTesla.FK!MTB?

Trojan:MSIL/AgentTesla.FK!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X