About “IL:Trojan.MSILZilla.10302” infection

The IL:Trojan.MSILZilla.10302 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.10302 virus can do?

• Injection (inter-process)
• Injection (Process Hollowing)
• Injection with CreateRemoteThread in a remote process
• Creates RWX memory
• Reads data out of its own binary image
• A process created a hidden window
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Uses Windows utilities for basic functionality
• Executed a process and injected code into it, probably while unpacking
• Installs itself for autorun at Windows startup
• Creates a hidden or system file
• Operates on local firewall’s policies and settings
• Creates a copy of itself
• Interacts with known DarkComet registry keys
• Attempts to disable UAC
• Attempts to modify or disable Security Center warnings
• Creates known Fynloski/DarkComet mutexes

Related domains:

How to determine IL:Trojan.MSILZilla.10302?

File Info:
crc32: 12493CDE
md5: e8c2ed8298ff7da0c9759afff5563e0c
name: E8C2ED8298FF7DA0C9759AFFF5563E0C.mlw
sha1: 4b64ec10d04c9e5e474e22fa393296592db7e2e5
sha256: 24962825558b20d2f1cd3784601f45e47da732a4bf606e370d3f00bbaa0e6841
sha512: 76ab7eaf99d343dddfa7ee77df17ca551c763d8a48bae9fb48422799571a6e2bea6f4abd44609d8d385d9d8a04be6cc67f4d3870916f108cc6747ced79b7ac17
ssdeep: 12288:ZeaqK58ApT5395b11M9GXfP7xMbtNvuM+aSj0M4ACeaLHXSLNBWrSa6ieZ8lGIS:j5hT5XPM8vTibtNW9jTNnaWLzWegg/u
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: CO1L2E2PMWBCkVMM9ntqE
Assembly Version: 0.6.0.0
InternalName: Picslideshow.exe
FileVersion: 0.0.06.06
CompanyName: CO1L2E2PMWBCkVMM
LegalTrademarks: CO1L2E2PMWBCkVMM9n
Comments: CO1L2E2PMWBCkVMM9
ProductName: CO1L2E2PMWBCkVMM9nt
ProductVersion: 0.0.06.06
FileDescription: CO1L2E2PMWBCkVM
OriginalFilename: Picslideshow.exe

IL:Trojan.MSILZilla.10302 also known as:

How to remove IL:Trojan.MSILZilla.10302?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.