Trojan

Should I remove “Trojan:MSIL/AgentTesla.JPI!MTB”?

Malware Removal

The Trojan:MSIL/AgentTesla.JPI!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/AgentTesla.JPI!MTB virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Trojan:MSIL/AgentTesla.JPI!MTB?



File Info:

crc32: 75D56856
md5: 20cc43a0f1e04368aaee661ed58d02fb
name: 20CC43A0F1E04368AAEE661ED58D02FB.mlw
sha1: 32d1ceb98d797950717b765aeae601ebb228fffd
sha256: 15d1ad2f29ee36af623da350e43406144da9e22eb7d9c2b47ff25deb819fc410
sha512: 7576032a070502d19725def02a41a6016136a9c0fde7367f23e79ea5003cebe16b3ee6eb4fc53d7d9460334c32a19da286bb5d5abdd6b3de2f92ac23f29b1a8a
ssdeep: 6144:91LtvJ/xaqAoid/sFli0uudOgJv018HgtwZtfQ6tYjB8HQl3HJpfVvfKfxnA:91JFx3FiJsXXkwVYjaOD9vfKfBA
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2015
Assembly Version: 1.0.0.0
InternalName: Random String Generator.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Random String Generator
ProductVersion: 1.0.0.0
FileDescription: Random String Generator
OriginalFilename: Random String Generator.exe

Trojan:MSIL/AgentTesla.JPI!MTB also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Siggen15.13812
CynetMalicious (score: 100)
ALYacGen:Variant.MSILHeracles.22084
CylanceUnsafe
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/Kryptik.ali2000016
Cybereasonmalicious.98d797
CyrenW32/MSIL_Kryptik.BLT.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.WLD
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Backdoor.MSIL.Androm.gen
BitDefenderGen:Variant.MSILHeracles.22084
MicroWorld-eScanGen:Variant.MSILHeracles.22084
TencentMsil.Backdoor.Androm.Hqlw
Ad-AwareGen:Variant.MSILHeracles.22084
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34142.vm0@aWd3Ejm
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
FireEyeGeneric.mg.20cc43a0f1e04368
EmsisoftGen:Variant.MSILHeracles.22084 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.haqwb
AviraHEUR/AGEN.1141630
KingsoftWin32.Hack.Undef.(kcloud)
MicrosoftTrojan:MSIL/AgentTesla.JPI!MTB
ArcabitTrojan.MSILHeracles.D5644
ZoneAlarmHEUR:Backdoor.MSIL.Androm.gen
GDataGen:Variant.MSILHeracles.22084
AhnLab-V3Trojan/Win32.AgentTesla.R350659
McAfeeArtemis!20CC43A0F1E0
MAXmalware (ai score=85)
MalwarebytesMalware.AI.627995766
PandaTrj/GdSda.A
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.ZXO!tr
AVGWin32:PWSX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan:MSIL/AgentTesla.JPI!MTB?

Trojan:MSIL/AgentTesla.JPI!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment