Trojan:MSIL/AgentTesla.PTHA!MTB removal

The Trojan:MSIL/AgentTesla.PTHA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/AgentTesla.PTHA!MTB virus can do?

• Sample contains Overlay data
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid

How to determine Trojan:MSIL/AgentTesla.PTHA!MTB?

File Info:
name: C571064AA7D6BE73874E.mlw
path: /opt/CAPEv2/storage/binaries/7ff7b4dbad4e820ea3c7d7ee833f75207f011cb6210b87cec5950312deea6897
crc32: 348DFB4E
md5: c571064aa7d6be73874e5e2aad28e235
sha1: 07bf960903f25507c6473c953cad3c999d388863
sha256: 7ff7b4dbad4e820ea3c7d7ee833f75207f011cb6210b87cec5950312deea6897
sha512: 284bedef639667bfaf81e63ceaead53553605516a96f91d009f0264d8f7c6a74e4389b99d5e9d0cccace34279d11f0fc8b8e603d9a5cb871a01e5968562eb663
ssdeep: 24576:INcxM7FGND2gM5ibRhADY4txtlNtxK7og9:INC4FGND2gS8RWh5C
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13C259D00ABB54227D2BEABB099B327110BF4F863D5A5E70F56C060D9285731AEF5172F
sha3_384: c528c7bc76bc5a3ebffa9bfbb753673c5e5198a792e77279718721e3d524681e7de3db2ad0f3437d4d43d8bbe0dc6f01
ep_bytes: 
timestamp: 2024-01-24 18:59:15

Version Info:
0: [No Data]

Trojan:MSIL/AgentTesla.PTHA!MTB also known as:

How to remove Trojan:MSIL/AgentTesla.PTHA!MTB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.