TrojanSpy:MSIL/AgentTesla.AQ!MTB removal instruction

The TrojanSpy:MSIL/AgentTesla.AQ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanSpy:MSIL/AgentTesla.AQ!MTB virus can do?

Attempts to mimic the file extension of a PDF document by having ‘pdf’ in the file name.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanSpy:MSIL/AgentTesla.AQ!MTB?


File Info:
crc32: 60848FB4
md5: 3e537d2201a5aeadc8590a4a06c32960
name: no_01222016.pdf.scr
sha1: 8454e39274f8320cb5c4eceefe807e4990a7942b
sha256: 7bb27fe6807b77480f3951186ac7de830d60cb7e61733c5314d9b6e099abea5e
sha512: 10a3a6201da0df8f26d53d61af4b8f9e3708142f9d0a248b50738392fc1cb7e7c67470e62e431559b8bd47ef682de784df9c0e1da1df1ed58269a9d61811e601
ssdeep: 6144:h6gVShDE44QqzJ+K0IfStTwe0FW3r2w502aFdnp/1fXgy9Y5ho:z8m4k7f5e0ar2yGtfXQ5
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2015 - 2019
Assembly Version: 0.0.0.0
InternalName: async.exe
FileVersion: 4.6.8.10
CompanyName: m/7S*Do5Mn4(!Hx
Comments: e/6R+Bm9K5)k4
ProductName: Pj6*)Dg4i7Y/F
ProductVersion: 4.6.8.10
FileDescription: Pj6*)Dg4i7Y/F
OriginalFilename: async.exe

TrojanSpy:MSIL/AgentTesla.AQ!MTB also known as:

MicroWorld-eScan	Trojan.GenericKDZ.68940
FireEye	Generic.mg.3e537d2201a5aead
ALYac	Trojan.GenericKDZ.68940
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 005620bd1 )
BitDefender	Trojan.GenericKDZ.68940
K7GW	Trojan ( 005620bd1 )
TrendMicro	TROJ_GEN.R002C0WGO20
BitDefenderTheta	Gen:NN.ZemsilF.34138.um0@aCmFBQ
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
GData	MSIL.Backdoor.ASyncRAT.5XSXFX
Kaspersky	HEUR:Backdoor.MSIL.Androm.gen
Alibaba	TrojanSpy:MSIL/AgentTesla.a2900ffd
Tencent	Msil.Backdoor.Androm.Lmbb
Ad-Aware	Trojan.GenericKDZ.68940
Sophos	Mal/Generic-S
Emsisoft	Trojan.GenericKDZ.68940 (B)
Ikarus	Trojan-Spy.FormBook
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D10D4C
ZoneAlarm	HEUR:Backdoor.MSIL.Androm.gen
Microsoft	TrojanSpy:MSIL/AgentTesla.AQ!MTB
McAfee	Fareit-FVT!3E537D2201A5
MAX	malware (ai score=89)
Malwarebytes	Trojan.Crypt
Panda	Trj/GdSda.A
ESET-NOD32	a variant of MSIL/Kryptik.UZB
TrendMicro-HouseCall	TROJ_GEN.R002C0WGO20
Rising	Trojan.Kryptik!8.8 (CLOUD)
SentinelOne	DFI – Malicious PE
Fortinet	MSIL/Kryptik.UZB!tr
AVG	Win32:CrypterX-gen [Trj]
CrowdStrike	win/malicious_confidence_90% (W)
Qihoo-360	Win32/Trojan.cfe

How to remove TrojanSpy:MSIL/AgentTesla.AQ!MTB?

TrojanSpy:MSIL/AgentTesla.AQ!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

TrojanSpy:MSIL/AgentTesla.AQ!MTB removal instruction