Should I remove “Trojan:MSIL/AgentTesla.ID!MTB”?

The Trojan:MSIL/AgentTesla.ID!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/AgentTesla.ID!MTB virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Trojan:MSIL/AgentTesla.ID!MTB?


File Info:
crc32: 39193C34
md5: 7b7bcf7dc5d1f4d0ea8f9c5d6a1b5868
name: 7B7BCF7DC5D1F4D0EA8F9C5D6A1B5868.mlw
sha1: 08b9fe0a7c0c96122ef74fbe0d300a72dac0130a
sha256: 76d2ccdcfa4695341195307272f60a18bfcb683a7fb4fc2bcb34086621150d7b
sha512: 2222ed59755dcc772b7477b4000f1c703e3b66d8c8ff96ec8ac897eca81ff8575eaaa463d87835d25426ff3653d42fc5d9a5f2fed61900ee575ccb21b4bfedeb
ssdeep: 196608:wsRXuzBB2yB4tZbZUNjZft23OdfANoCvp5+1UK:w95B6VMOioqCx5p
type: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
Assembly Version: 10.0.17763.475
InternalName: app.exe
FileVersion: 10.0.17763.475
CompanyName: Microsoft Corporation
LegalTrademarks: 
Comments: Notepad
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.17763.475
FileDescription: Notepad
OriginalFilename: app.exe

Trojan:MSIL/AgentTesla.ID!MTB also known as:

K7AntiVirus	Trojan ( 0001140e1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (W)
K7GW	Trojan ( 0001140e1 )
Cybereason	malicious.a7c0c9
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win64:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan-Ransom.MSIL.Blocker.gen
MicroWorld-eScan	Trojan.GenericKD.37217348
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win64.Trojan.wc
FireEye	Generic.mg.7b7bcf7dc5d1f4d0
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:MSIL/AgentTesla.ID!MTB
GData	Trojan.GenericKD.37217348
McAfee	Artemis!7B7BCF7DC5D1
MAX	malware (ai score=89)
AVG	Win64:MalwareX-gen [Trj]
Paloalto	generic.ml

How to remove Trojan:MSIL/AgentTesla.ID!MTB?

Trojan:MSIL/AgentTesla.ID!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X