[SOLVED] AgentTesla Removal (Help needed)

[calvin!!]

Hey guys, recently AgentTesla just appeared within WindowsDefender and I have no idea how it appeared there as I didn't install anything.



Here is a picture of windows getting triggered by it

 

[rgd1101]

scan your system for malware. windows up to date?

 

[calvin!!]

scan your system for malware. windows up to date?

windows defender claims its a virus but its most likely a false positive. i ran it with avira and its fine so idk

 

[USAFRet]

windows defender claims its a virus but its most likely a false positive. i ran it with avira and its fine so idk

Who Is Agent Tesla? – Krebs on Security

Agent Tesla Trojan 'Kneecaps' Microsoft's Anti-Malware Interface

A new version of the Agent Tesla RAT can 'kneecap' endpoint protection software supported by Microsoft ASMI.

threatpost.com

Agent Tesla amps up information stealing attacks

Recent updates to this common RAT add new communications methods and subvert the operating system’s own defenses

news.sophos.com

Why would you assume false positive?

 

[Johnwmel]

"windows defender claims its a virus but its most likely a false positive. i ran it with avira and its fine so idk "
Doublecheck with Malwarebytes.

Run Malwarebytes Anti-Malware ( MBAM ) Use Threat Scan. Make sure Rootkit scan is on.
https://www.softpedia.com/get/Antivirus/Malwarebytes-Anti-Malware.shtml

Malwarebytes Anti-Malware 4.4.9.142 Free Download - FreewareFiles.com

Malwarebytes Anti Malware - An easy-to-use, effective application to detect and remove malware.

www.freewarefiles.com

https://www.freewarefiles.com/screenshot.php?programid=54166

Cyber Security Software and Anti-Malware | Malwarebytes

Protect your home and business PCs, Macs, iOS and Android devices from the latest cyber threats and malware, including ransomware.

www.malwarebytes.org

Forum

Malwarebytes Forums

www.malwarebytes.org

FAQ - Malwarebytes won't run or failed to resolve my issues

FAQ - Malwarebytes won't run or failed to resolve my issues

Greetings, While prevention is always better than having to deal with infections after the fact, and since cleanup can often be an incredibly difficult process, the following tutorials were created to assist you with using known methods to get Malwarebytes up and running when it is being prevente...

forums.malwarebytes.com

Scanning, you will get something like this.

https://imgur.com/4NZ5Qw0

View: https://i.imgur.com/4NZ5Qw0.gif

https://imgur.com/rRfr1oD

View: https://i.imgur.com/rRfr1oD.gif

https://imgur.com/tShE6tQ

View: https://i.imgur.com/tShE6tQ.gif

https://imgur.com/iJZHDC0

View: https://i.imgur.com/iJZHDC0.gif

After a restart ( if required ) Copy & Paste the contents of the scan into your reply.
If too large, upload to a site of your choosing.
Follow these directions, until you get to Export.
https://support.malwarebytes.com/hc/en-us/articles/360038479194