Trojan

Trojan:MSIL/AgentTesla.JHX!MTB removal

Malware Removal

The Trojan:MSIL/AgentTesla.JHX!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:MSIL/AgentTesla.JHX!MTB virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine Trojan:MSIL/AgentTesla.JHX!MTB?


File Info:

crc32: 78A4F30E
md5: 0868402a713a1bf194ce967b9b84457e
name: 0868402A713A1BF194CE967B9B84457E.mlw
sha1: 93711903268643ebdab4395f656b18c8f0f85989
sha256: fa9ebe004c1b25920136170b24bbe62acbc92290002d1e8fc72f2d5937123b89
sha512: 608abc0c03e3f4b6ce2523b9e826432ea8828b4ee7875a7080cd77ff415ed49a0ba245d109a4d39c8b74e979f1c5731bca3c2e126183b12ec4ad3eacd005a5af
ssdeep: 1536:ldh3euSZDT9+1Zp81DCvo0FunUO2X7RDqf+VuWgRzZWfbu7wfa1:FnSZg1sDCvo0Anj2X7pEWgb+buH
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2021
Assembly Version: 1.0.0.0
InternalName: WindowsApp1.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: WindowsApp1
ProductVersion: 1.0.0.0
FileDescription: WindowsApp1
OriginalFilename: WindowsApp1.exe

Trojan:MSIL/AgentTesla.JHX!MTB also known as:

Elasticmalicious (high confidence)
DrWebTrojan.MulDrop18.35070
CynetMalicious (score: 100)
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.326864
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.ZQR
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Backdoor.MSIL.Bladabindi.gen
SophosML/PE-A
BitDefenderThetaGen:NN.ZemsilF.34110.em0@ay28B5d
TrendMicroTROJ_GEN.R005C0DHL21
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.0868402a713a1bf1
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1117406
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:MSIL/AgentTesla.JHX!MTB
ZoneAlarmHEUR:Backdoor.MSIL.Bladabindi.gen
GDataMSIL.Backdoor.Bladabindi.2EDR1L
AhnLab-V3Win-Trojan/MSILKrypt09.Exp
McAfeeArtemis!0868402A713A
TrendMicro-HouseCallTROJ_GEN.R005C0DHL21
IkarusTrojan.Dropper
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/CoinMiner.BHP!tr
AVGWin32:MalwareX-gen [Trj]

How to remove Trojan:MSIL/AgentTesla.JHX!MTB?

Trojan:MSIL/AgentTesla.JHX!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment