Spy Trojan

TrojanSpy:MSIL/AgentTesla.AM!MTB removal tips

Malware Removal

The TrojanSpy:MSIL/AgentTesla.AM!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanSpy:MSIL/AgentTesla.AM!MTB virus can do?

  • Presents an Authenticode digital signature
  • Network activity detected but not expressed in API logs

How to determine TrojanSpy:MSIL/AgentTesla.AM!MTB?


File Info:

crc32: D9EF926B
md5: 457c0297acb3c763b9497962dc440bc7
name: 457C0297ACB3C763B9497962DC440BC7.mlw
sha1: 9cf0966e538a770fd4bece35c18ed6c46a967abe
sha256: f04d5b287971f60d5f04b262f3714a790b7d7c9b591ab88faa1d1f5244792d09
sha512: 596bee1b165e8c34a54566580d2ded7998fc5f3dd36255787f881ab6cf3eb1525492578d2a6aa64f8c7a4b027fd3ba213fd4e1ce36be1df62909d80dfc53eff6
ssdeep: 24576:YcUh9qpAAJ1Rkt//ze05fitMgSqmti5pGZTVSvwtn5mLv1hY8IeJmYZq/UAy/0NE:x1et9iCgSc6WvtL9q8IeJmD/ZbG+A
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

0: [No Data]

TrojanSpy:MSIL/AgentTesla.AM!MTB also known as:

MicroWorld-eScanTrojan.GenericKD.35730571
McAfeeArtemis!457C0297ACB3
CylanceUnsafe
SangforMalware
BitDefenderTrojan.GenericKD.35730571
ArcabitTrojan.Generic.D221348B
CyrenW32/MSIL_Kryptik.CLB.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
AlibabaTrojan:MSIL/Injector.01743027
Ad-AwareTrojan.GenericKD.35730571
SophosMal/Generic-S
F-SecureTrojan.TR/Injector.fkwru
DrWebBackDoor.SpyBotNET.25
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.457c0297acb3c763
EmsisoftTrojan.GenericKD.35730571 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Injector.fkwru
MAXmalware (ai score=87)
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojanSpy:MSIL/AgentTesla.AM!MTB
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
GDataTrojan.GenericKD.35730571
CynetMalicious (score: 100)
ESET-NOD32a variant of MSIL/Injector.VGF
IkarusTrojan.MSIL.Injector
FortinetMSIL/Injector.VGF!tr
BitDefenderThetaGen:NN.ZemsilF.34700.FkX@ai6g!Se
AVGFileRepMalware
Cybereasonmalicious.e538a7

How to remove TrojanSpy:MSIL/AgentTesla.AM!MTB?

TrojanSpy:MSIL/AgentTesla.AM!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment