Found Trojan:MSIL/AgentTesla.AM!MTB, partially removed by Microsoft Safety Scanner

pingatwork 156 Reputation points
2021-03-11T09:15:36.95+00:00

Hi experts,

After running the Microsoft Safety Scanner on a VM running Windows 2012R2 plus the Exchange 2016 CU19, after restarted, the scanning results shown that there are some malware were not fully removed - e.g, Found Trojan:MSIL/AgentTesla.BM!MTB, partially removed. Now anti-virus program running a full scan.

I'd like to know your suggestion on the ways to clean up those malware that only partially removed now.

thanks for your time.
pingatwork

Windows Server 2012
Windows Server 2012
A Microsoft server operating system that supports enterprise-level management, data storage, applications, and communications.
1,612 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,752 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Reza-Ameri 17,011 Reputation points
    2021-03-13T17:53:07.777+00:00

    Firstly you should run a full system scan.
    Also check where it has been located, is it inside a zip file or in a ISO file?
    Then, you have to manually scan it or remove the file.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.