IL:Trojan.MSILMamut.3068 removal guide

The IL:Trojan.MSILMamut.3068 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILMamut.3068 virus can do?

Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILMamut.3068?


File Info:
name: 6F04E717EDFE4E790EDE.mlw
path: /opt/CAPEv2/storage/binaries/26512977a59fcee8c6ef2ebbbd3987c1c92474f6fca764345a7497ea93e1908f
crc32: 429BDFA2
md5: 6f04e717edfe4e790ede743d136800e8
sha1: f580277f9de6df25fcac9984ca94b6a87c697650
sha256: 26512977a59fcee8c6ef2ebbbd3987c1c92474f6fca764345a7497ea93e1908f
sha512: 3eedd5846a1ee157b01b5c96874e0ad2d966c07935aef22e466ce36a761eb370c88c2a777197ded5b74d1d81479e59f9da401fe003be86332bc95cc7337bb082
ssdeep: 12288:YwVL99xNkEo0ZGC72Yfl6XhoZDwdWVtOL136iUrMCWGkK6dnFXnYhmnuTTIAEnHJ:dZ99xNkEo0+DR1otOfD5FXnDnpAEnp
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13985A5224ECCE6A5E06395BAC429B004C0F59FEFF55CD95A3B7E6989947C9C1C2482CF
sha3_384: abb3e359ceec3a16453f51633572a843a83fc2294a647308537d1c499d87662c229902183a9270e5cc8e3e3e6cad489b
ep_bytes: ff250020400000000000000000000000
timestamp: 2052-10-17 09:44:48

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: aV_Kennav75551
FileVersion: 4.3.2.2
InternalName: odricusv75551_.7555.0.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: odricusv75551_.7555.0.exe
ProductName: aV_Kennav75551
ProductVersion: 4.3.2.2
Assembly Version: 2.6.7.6

IL:Trojan.MSILMamut.3068 also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
ALYac	IL:Trojan.MSILMamut.3068
Cyren	W32/MSIL_Agent.CPE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.ICY.gen
APEX	Malicious
Kaspersky	HEUR:Trojan-Downloader.MSIL.Agent.gen
BitDefender	IL:Trojan.MSILMamut.3068
MicroWorld-eScan	IL:Trojan.MSILMamut.3068
Avast	Win32:DropperX-gen [Drp]
Ad-Aware	IL:Trojan.MSILMamut.3068
F-Secure	Heuristic.HEUR/AGEN.1246446
VIPRE	IL:Trojan.MSILMamut.3068
McAfee-GW-Edition	GenericRXQS-NQ!6F04E717EDFE
FireEye	IL:Trojan.MSILMamut.3068
Ikarus	Trojan-Downloader.MSIL.Agent
GData	IL:Trojan.MSILMamut.3068
Avira	HEUR/AGEN.1246446
Arcabit	IL:Trojan.MSILMamut.DBFC
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Dropper/Win.Miner.C4695669
McAfee	GenericRXQS-NQ!6F04E717EDFE
MAX	malware (ai score=82)
Malwarebytes	Trojan.Downloader.MSIL.Generic
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.ICY.gen!tr
BitDefenderTheta	Gen:NN.ZemsilCO.34582.Vn0@a0fR2Sp
AVG	Win32:DropperX-gen [Drp]

How to remove IL:Trojan.MSILMamut.3068?

IL:Trojan.MSILMamut.3068 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X