Trojan.Fileless.MTGen

Short bio

Trojan.Fileless.MTGen is a generic detection for the startup locations in use by fileless infections that gain persistence by creating registry keys on Windows systems.

More information about fileless infections can be found in our blog post, Fileless Infections: An Overview.

Symptoms

In the majority of the cases, the registry keys created by Trojan.Fileless.MTGen are designed to run Powershell commands that  carry out the rest of the infection. Other than Powershell, we have also seen the mshta command used as such.

Protection

Malwarebytes protects users from Trojan.Fileless.MTGen by using real-time protection to block the trojans that create them.

prevent Trojan.Fileless.MTGen

Malwarebytes prevents Trojan.Fileless.MTGen

Remediation

Malwarebytes can detect and remove Trojan.Fileless.MTGen without further user interaction.

  1. Please download Malwarebytes to your desktop.
  2. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
  3. Then click Finish.
  4. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
  5. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
  6. When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  7. Restart your computer when prompted to do so.

Some of these Trojans are very difficult to remove or keep coming back. Make sure that the scan for rootkits in Malwarebytes is enabled under “Scan options” on the “Protection” tab.

Cybersecurity info you can’t do without

Want to stay informed on the latest news in cybersecurity? Sign up for our newsletter and learn how to protect your computer from threats.

Select your language