IL:Trojan.MSILMamut.1026 removal instruction

The IL:Trojan.MSILMamut.1026 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILMamut.1026 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine IL:Trojan.MSILMamut.1026?


File Info:
name: E053EE2F54D6E8CEF8E6.mlw
path: /opt/CAPEv2/storage/binaries/00775e01a24eddf90f89acf63340aa050dfc36e0275d7f3172aac9d04668c11c
crc32: FB3B3D4C
md5: e053ee2f54d6e8cef8e64c72b190f75e
sha1: 711591d198045cc0c0a193fc416d17da39477075
sha256: 00775e01a24eddf90f89acf63340aa050dfc36e0275d7f3172aac9d04668c11c
sha512: fdc90f948479f39dfa0572371e6f84398a5300aa2e4062c96a0c09e793a1cc539c9480cb0554f36a09da84212d2a85780977eadbb1e7b36cab7b028b73bec7c4
ssdeep: 768:gp1uNBc+PwPS6CTYud+vPpJ6Z5G6+0C4NzKzvTUdIXcFaUVL+ZU4m:gp1uNBHPqS6CTYud+vPAI6GvToscFaEV
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CDE21B49FBC47673C1A51B3AC163650342F68303AA7BFF2B44CC19A9DA577D0884B5B6
sha3_384: c0794f07de135018400b15c7c28b50d0681c0296a54fa3537df1e2258a2fbbf5b8d0f553abc72cde8bcfbc9eedd67850
ep_bytes: ff250020400000000000000000000000
timestamp: 2014-03-09 20:27:52

Version Info:
Translation: 0x0000 0x04b0
FileDescription: connect to vpn
FileVersion: 1.0.0.0
InternalName: connect to vpn.exe
LegalCopyright: Copyright ©  2013
OriginalFilename: connect to vpn.exe
ProductName: connect to vpn
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILMamut.1026 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	IL:Trojan.MSILMamut.1026
FireEye	Generic.mg.e053ee2f54d6e8ce
ALYac	IL:Trojan.MSILMamut.1026
Cylance	Unsafe
Sangfor	Trojan.MSIL.Kryptik.JWY
K7AntiVirus	Trojan ( 00522a5e1 )
Alibaba	Trojan:MSIL/Kryptik.e7a60a66
K7GW	Trojan ( 00522a5e1 )
Cybereason	malicious.198045
BitDefenderTheta	Gen:NN.ZemsilF.34742.bm0@aqjsX7c
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of MSIL/Kryptik.JWY
TrendMicro-HouseCall	TROJ_GEN.R002C0PDU22
Paloalto	generic.ml
Cynet	Malicious (score: 99)
BitDefender	IL:Trojan.MSILMamut.1026
Avast	Win32:Trojan-gen
Ad-Aware	IL:Trojan.MSILMamut.1026
Emsisoft	IL:Trojan.MSILMamut.1026 (B)
Zillya	Trojan.Kryptik.Win32.3746048
McAfee-GW-Edition	RDN/Generic.dx
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
GData	IL:Trojan.MSILMamut.1026
Avira	HEUR/AGEN.1202593
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	RDN/Generic.dx
MAX	malware (ai score=83)
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.90 (RDM.MSIL:Ka92PhGKQS6PliQsuFDHPA)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.JWY!tr
AVG	Win32:Trojan-gen

How to remove IL:Trojan.MSILMamut.1026?

IL:Trojan.MSILMamut.1026 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X