Spy • Trojan

TrojanSpy:MSIL/Stelega.VA!MTB removal

Malware Removal

The TrojanSpy:MSIL/Stelega.VA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What TrojanSpy:MSIL/Stelega.VA!MTB virus can do?

  • Network activity detected but not expressed in API logs

How to determine TrojanSpy:MSIL/Stelega.VA!MTB?



File Info:

crc32: D0196F98
md5: e885fdd6a38169bd6a79f19abfc9bad8
name: E885FDD6A38169BD6A79F19ABFC9BAD8.mlw
sha1: 34474b0f4eba14a874abc04c8dc9caac59bc1727
sha256: 582a749365f8fc378595f3a837d0f2056d71701a1aa84b6523381f8cefbbe6da
sha512: 0af6339e3de1b6fcd45691bc5721b1024c0011a24bcde42976bc11cc0b3cedf9607fa4698ad8c3cb17847a764eb16393da1f99abdab80384bb716645ad9e1546
ssdeep: 12288:4g2Cdsi6E7kxWfnUpcWcyCiT0vp9RS/kVYd1w:4Odd61wPUOWy9vp9RhYdq
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2014 A:JECE9A=;?6JE
Assembly Version: 1.0.0.0
InternalName: akazx.exe
FileVersion: 8.12.16.20
CompanyName: A:JECE9A=;?6JE
Comments: 8=?H5F4JA;HE86E;
ProductName: E;33;98:@BF9@F<E44J
ProductVersion: 8.12.16.20
FileDescription: E;33;98:@BF9@F<E44J
OriginalFilename: akazx.exe

TrojanSpy:MSIL/Stelega.VA!MTB also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.45146828
McAfeePWS-FCQR!E885FDD6A381
CylanceUnsafe
AegisLabTrojan.Win32.Generic.4!c
K7AntiVirusSpyware ( 004bf53c1 )
BitDefenderTrojan.GenericKD.45146828
K7GWSpyware ( 004bf53c1 )
Cybereasonmalicious.f4eba1
CyrenW32/MSIL_Kryptik.ANE.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
AlibabaTrojanSpy:MSIL/Stelega.c927b05e
ViRobotTrojan.Win32.Z.Agent.783872.CY
Ad-AwareTrojan.GenericKD.45146828
EmsisoftTrojan.GenericKD.45146828 (B)
Comodo.UnclassifiedMalware@0
DrWebBackDoor.SpyBotNET.25
McAfee-GW-EditionPWS-FCQR!E885FDD6A381
FireEyeGeneric.mg.e885fdd6a38169bd
SophosMal/Generic-S
IkarusTrojan.Inject
MAXmalware (ai score=100)
MicrosoftTrojanSpy:MSIL/Stelega.VA!MTB
ArcabitTrojan.Generic.D2B0E2CC
GDataTrojan.GenericKD.45146828
BitDefenderThetaGen:NN.ZemsilF.34700.Vm0@aGgVAqj
MalwarebytesTrojan.Crypt.MSIL.Generic
PandaTrj/GdSda.A
ESET-NOD32MSIL/Spy.Agent.AES
TrendMicro-HouseCallTROJ_GEN.R06CH0CLO20
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.ZCO!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360Generic/HEUR/QVM03.0.25A7.Malware.Gen

How to remove TrojanSpy:MSIL/Stelega.VA!MTB?

TrojanSpy:MSIL/Stelega.VA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment