IL:Trojan.MSILMamut.1324 removal

The IL:Trojan.MSILMamut.1324 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILMamut.1324 virus can do?

Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine IL:Trojan.MSILMamut.1324?


File Info:
name: A13913BB98E1AFF7C8A6.mlw
path: /opt/CAPEv2/storage/binaries/009b7d88aa106725749b55f80c193dbd3fdb781914ee70f50aa70baddd665edb
crc32: 8378E378
md5: a13913bb98e1aff7c8a6e494ea2f63b4
sha1: f0e3cace661a9550f7784d152d810b6bb37188a1
sha256: 009b7d88aa106725749b55f80c193dbd3fdb781914ee70f50aa70baddd665edb
sha512: d13b103153506241dd3842282e4a3b24e0043773c942863716c8f61626076be7225d538ed6a0a70019e26ac8cc53a2307ae14e06b828291ed5239155e8571a4b
ssdeep: 3072:qSj+2p996jjI7akNgk9fur3hspSHnBm+7eh1RTpgOPsVYi3DvMvKkG1SYrnRjSrj:3+2pKtkNg7DHnA+78Fmoj1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19164E61275C48E7AD668D63375E0808C52F7A8C52722FB493E8D639D18E56B1CF70BE2
sha3_384: 87ac38f6d65f3c31013beb269817c70d2dcf8227e7b7eba1e5d03b5e08278f422e5907d6fec3238235cd60de942a6665
ep_bytes: ff250020400000000000000000000000
timestamp: 2010-11-12 10:06:06

Version Info:
Translation: 0x0000 0x04b0
Comments: Keylogger
CompanyName: kript0x
FileDescription: RAGE Logger
FileVersion: 1.0.0.0
InternalName: RAGE Logger.exe
LegalCopyright: Copyright © kript0x 2010
OriginalFilename: RAGE Logger.exe
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILMamut.1324 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	IL:Trojan.MSILMamut.1324
CAT-QuickHeal	Trojan.Generic
ALYac	IL:Trojan.MSILMamut.1324
Cylance	Unsafe
Sangfor	Trojan.Win32.Agent.Vcch
Alibaba	Trojan:Win32/Generic.ddeef989
K7GW	Hacktool ( 005966371 )
K7AntiVirus	Hacktool ( 005966371 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	MSIL/HackTool.Agent.SQ
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	IL:Trojan.MSILMamut.1324
Avast	MSIL:Crypt-LP [Trj]
Tencent	Win32.Trojan.Generic.Lizx
Ad-Aware	IL:Trojan.MSILMamut.1324
Sophos	Mal/Generic-S
VIPRE	IL:Trojan.MSILMamut.1324
McAfee-GW-Edition	Artemis
FireEye	IL:Trojan.MSILMamut.1324
Emsisoft	IL:Trojan.MSILMamut.1324 (B)
SentinelOne	Static AI – Suspicious PE
GData	IL:Trojan.MSILMamut.1324
Antiy-AVL	Trojan/Generic.ASMalwS.1D5B
Arcabit	IL:Trojan.MSILMamut.D52C
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!A13913BB98E1
MAX	malware (ai score=89)
TrendMicro-HouseCall	TROJ_GEN.R002H07E722
Rising	Trojan.Generic/MSIL@AI.98 (RDM.MSIL:JrNROklP6x3WpRH57eSXqw)
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZemsilCO.34582.sq0@aGcmlOe
AVG	MSIL:Crypt-LP [Trj]
Panda	Trj/GdSda.A

How to remove IL:Trojan.MSILMamut.1324?

IL:Trojan.MSILMamut.1324 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X