Trojan

Trojan:MSIL/AgentTesla.MB!MTB removal

Malware Removal

The Trojan:MSIL/AgentTesla.MB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:MSIL/AgentTesla.MB!MTB virus can do?

  • Network activity detected but not expressed in API logs

How to determine Trojan:MSIL/AgentTesla.MB!MTB?


File Info:

crc32: 859B853D
md5: e1622c2297eb663b2c1054ddc8f93659
name: E1622C2297EB663B2C1054DDC8F93659.mlw
sha1: 36e49e9e443ccc82ac3c93cd4fdb995c2d118bdf
sha256: 48afec636886aebdf7f0be7d5b9c034f2568b890215a15f13554933d94322045
sha512: da4c1778dd67fc878603a405c9d37d51770b4b550a9ce113bbccd761ddb889d78cc8231341740417d7806ee5d3f1dc6154710fe3ab98b3ceec6b14a13260fc5b
ssdeep: 768:TuifgfpPYi2+26kMPGSEILzB8oqlz/d+:TpYxQi2quSEIB8Jo
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2021
Assembly Version: 1.0.0.0
InternalName: ConsoleApp21.exe
FileVersion: 1.0.0.0
CompanyName: ConsoleApp21
LegalTrademarks: ConsoleApp21
Comments: ConsoleApp21
ProductName: ConsoleApp21
ProductVersion: 1.0.0.0
FileDescription: ConsoleApp21
OriginalFilename: ConsoleApp21.exe

Trojan:MSIL/AgentTesla.MB!MTB also known as:

MicroWorld-eScanGen:Variant.MSILHeracles.11969
FireEyeGeneric.mg.e1622c2297eb663b
Qihoo-360Win32/Trojan.Generic.HgIASOcA
McAfeeGenericRXNL-FC!E1622C2297EB
CylanceUnsafe
SangforTrojan.MSIL.Noon.gen
K7AntiVirusTrojan-Downloader ( 005773581 )
BitDefenderGen:Variant.MSILHeracles.11969
K7GWTrojan-Downloader ( 005773581 )
CyrenW32/MSIL_Kryptik.CZG.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan-Spy.MSIL.Noon.gen
AlibabaTrojanSpy:MSIL/AgentTesla.a560a0b0
AegisLabTrojan.Win32.Bulz.4!c
TencentMsil.Trojan-spy.Noon.Ahxq
Ad-AwareGen:Variant.MSILHeracles.11969
SophosMal/Generic-S
ComodoMalware@#1842jua1w0ufa
F-SecureTrojan.TR/Dldr.Agent.gdayb
DrWebTrojan.DownLoaderNET.117
TrendMicroTROJ_GEN.R002C0PB421
McAfee-GW-EditionGenericRXNL-FC!E1622C2297EB
EmsisoftTrojan-Downloader.Agent (A)
IkarusTrojan-Downloader.MSIL.Agent
WebrootW32.Trojan.Gen
AviraTR/Dldr.Agent.gdayb
MAXmalware (ai score=84)
MicrosoftTrojan:MSIL/AgentTesla.MB!MTB
GridinsoftTrojan.Win32.Downloader.oa
ArcabitTrojan.MSILHeracles.D2EC1
ZoneAlarmHEUR:Trojan-Spy.MSIL.Noon.gen
GDataGen:Variant.MSILHeracles.11969
CynetMalicious (score: 85)
AhnLab-V3Malware/Win32.RL_Generic.C4320929
BitDefenderThetaGen:NN.ZemsilF.34804.bm0@audxG8h
ALYacGen:Variant.MSILHeracles.11969
MalwarebytesTrojan.Crypt.MSIL
PandaTrj/CI.A
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.HIB
TrendMicro-HouseCallTROJ_GEN.R002C0PB421
FortinetMSIL/Agent.HIB!tr.dldr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan:MSIL/AgentTesla.MB!MTB?

Trojan:MSIL/AgentTesla.MB!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment