What is "Trojan:MSIL/AgentTesla.U!MTB"?

The Trojan:MSIL/AgentTesla.U!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/AgentTesla.U!MTB virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:MSIL/AgentTesla.U!MTB?


File Info:
crc32: C0D9120C
md5: dab5bce27a9d25f219566fa7d17762c6
name: DAB5BCE27A9D25F219566FA7D17762C6.mlw
sha1: 338959d2a56613ff7d60e378cd570716cc155121
sha256: 5b77c17c1bb413e5d87843c960f67152fd4e6f558efbc8ad778a93b88e115c69
sha512: 09596bc46c5cf5c572f2432a26844bdac591075b39c423c720f0c6bf88baa3fefa88c3ea84c103579aaafe483b401162559e144d340eb6f89ee9e6d7ea84f6cc
ssdeep: 12288:Q2SR/SQVieUY3JMpEUmM05n8xYVeoQeH0GYAZnrehql:qR/SQVi7Y3JMdyn8GseH0ytris
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2017
Assembly Version: 1.0.0.0
InternalName: CapCap.exe
FileVersion: 1.5.0.0
CompanyName: Boss Ox
LegalTrademarks: 
Comments: Background screenshot taker
ProductName: CapCap
ProductVersion: 1.5.0.0
FileDescription: CapCap
OriginalFilename: CapCap.exe

Trojan:MSIL/AgentTesla.U!MTB also known as:

Elastic	malicious (high confidence)
Qihoo-360	Win32/TrojanSpy.AgentTesla.HwMAVyIA
McAfee	Artemis!DAB5BCE27A9D
Malwarebytes	MachineLearning/Anomalous.95%
K7GW	Trojan ( 00577aaa1 )
Cybereason	malicious.2a5661
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/Kryptik.ali2000016
AegisLab	Trojan.Multi.Generic.4!c
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/AD.XetimaLogger.imens
McAfee-GW-Edition	BehavesLike.Win32.Generic.jc
FireEye	Generic.mg.dab5bce27a9d25f2
Avira	TR/AD.XetimaLogger.imens
Microsoft	Trojan:MSIL/AgentTesla.U!MTB
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZemsilF.34574.Pm0@aKyIx!
Cylance	Unsafe
ESET-NOD32	MSIL/Spy.Agent.AES
TrendMicro-HouseCall	TROJ_GEN.R06CH01BH21
Rising	Trojan.GenKryptik!8.AA55 (CLOUD)
Fortinet	MSIL/GenKryptik.FBLL!tr
AVG	FileRepMalware
Avast	FileRepMalware
CrowdStrike	win/malicious_confidence_80% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Trojan:MSIL/AgentTesla.U!MTB?

Trojan:MSIL/AgentTesla.U!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Trojan:MSIL/AgentTesla.U!MTB”?