IL:Trojan.MSILZilla.10003 (file analysis)

The IL:Trojan.MSILZilla.10003 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.10003 virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs

How to determine IL:Trojan.MSILZilla.10003?


File Info:
crc32: D8C6C630
md5: e5c0c2f47c64bcf740c1a0424f3657dc
name: E5C0C2F47C64BCF740C1A0424F3657DC.mlw
sha1: d513b15cbda6f587d3dc8c6a1c347c9a3694f3b2
sha256: eb0090beb2e3a7e3db6d406061d6bedf4b9431f6062cb47b273a1bf377fae142
sha512: 4ca4ed479db88fd57b836741e199ee64b0201700a59cceb1871d669591e21763d010cf9176a6ebe79c3c02c4810e8559757caab5b1c21e2b4b42d4ec9a454a25
ssdeep: 384:vxUSjLWZgsKz+DK4i4dHrdHqQ4kDwlzCRJlUmNEE6roV4OROte4nGUc5tunV7Ki:ZtMNi4Rrp4CNWe4Zc5tunV7KYhJ
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 1.0.0.0
InternalName: Stub.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.0.0
FileDescription: 
OriginalFilename: Stub.exe

IL:Trojan.MSILZilla.10003 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.BtcMine.3353
ClamAV	Win.Malware.Barys-6836745-0
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	IL:Trojan.MSILZilla.10003
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.924457
CrowdStrike	win/malicious_confidence_70% (D)
K7GW	Trojan ( 005684c61 )
K7AntiVirus	Trojan ( 005684c61 )
ESET-NOD32	a variant of MSIL/Agent.BPK
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	IL:Trojan.MSILZilla.10003
MicroWorld-eScan	IL:Trojan.MSILZilla.10003
Tencent	Malware.Win32.Gencirc.116a5635
Ad-Aware	IL:Trojan.MSILZilla.10003
Sophos	ML/PE-A + Mal/LimeRAT-B
F-Secure	Trojan.TR/Dropper.Gen
BitDefenderTheta	Gen:NN.ZemsilF.34266.bm0@aWYkCHh
TrendMicro	Coinminer.MSIL.LIMERAT.SMA
McAfee-GW-Edition	GenericRXIJ-BB!E5C0C2F47C64
FireEye	Generic.mg.e5c0c2f47c64bcf7
Emsisoft	Trojan.Generic (A)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.Gen
eGambit	Trojan.Generic
Antiy-AVL	Trojan/Generic.ASMalwS.2C35323
Microsoft	Backdoor:Win32/LimeRat.YA!MTB
Arcabit	IL:Trojan.MSILZilla.D2713
GData	IL:Trojan.MSILZilla.10003
AhnLab-V3	Win-Trojan/LimeRAT.Exp
McAfee	GenericRXIJ-BB!E5C0C2F47C64
MAX	malware (ai score=84)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.Downloader.Pastebin
TrendMicro-HouseCall	Coinminer.MSIL.LIMERAT.SMA
Rising	Trojan.AntiVM!1.CF63 (CLASSIC)
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.BPK!tr
AVG	Win32:RATX-gen [Trj]

How to remove IL:Trojan.MSILZilla.10003?

IL:Trojan.MSILZilla.10003 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X