IL:Trojan.MSILZilla.11518 removal

The IL:Trojan.MSILZilla.11518 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.11518 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.11518?


File Info:
name: 1AA603A65FB84FE6D719.mlw
path: /opt/CAPEv2/storage/binaries/94315da3c1f217e0201378d75f81daad861c496a4303503d32d238a426fb9e93
crc32: A9CDFEB7
md5: 1aa603a65fb84fe6d719e1cb45d1f5dd
sha1: 6322a5bfa79882996e24ca857e95395091644e25
sha256: 94315da3c1f217e0201378d75f81daad861c496a4303503d32d238a426fb9e93
sha512: 524a6ae2e41e8b5ad94a03637c0d9fe6e03684bea5ea01d41a0849b276636cdd0cb1cb473c5c94a80cd98b036cc09cdd3f9d1d85f69f9865fb94ca127b45d2a6
ssdeep: 384:mMHNzDemdOs5Vf70OsaFbJOI7OZq6b/J4Yxv:mMtzOsPVXFbuZqYJ4e
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15A72190977E882B6C1BF9E7988B222104F70FB0BA911CF5E5AD5A15E1D33F058A51F26
sha3_384: 1e854ec56d3d51f644c601f6f9e0351b7132e12502adf9d706d67e8eaa5e341f92d04c7604d5f2049c0158eb235f14cd
ep_bytes: ff250020400000000000000000000000
timestamp: 2083-07-27 21:59:56

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: clipper.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: clipper.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.11518 also known as:

Lionic	Trojan.MSIL.Shelpak.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.11518
FireEye	Generic.mg.1aa603a65fb84fe6
McAfee	RDN/PWS-Banker
Malwarebytes	Trojan.Clipper
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:MSIL/ClipBanker.5ef89009
K7GW	Trojan ( 0055aed01 )
Cybereason	malicious.65fb84
BitDefenderTheta	Gen:NN.ZemsilF.34212.bm0@aqG!!Hp
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/ClipBanker.MO
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.MSIL.Shelpak.gen
BitDefender	IL:Trojan.MSILZilla.11518
Avast	Win32:TrojanX-gen [Trj]
Tencent	Win32.Trojan.Generic.Eanu
Ad-Aware	IL:Trojan.MSILZilla.11518
Emsisoft	IL:Trojan.MSILZilla.11518 (B)
DrWeb	Trojan.ClipBankerNET.7
TrendMicro	TrojanSpy.MSIL.CLIPBANKER.SM
McAfee-GW-Edition	RDN/PWS-Banker
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.ClipBanker
GData	IL:Trojan.MSILZilla.11518
MaxSecure	Trojan.Malware.103650238.susgen
Avira	TR/ATRAPS.Gen
Antiy-AVL	Trojan/MSIL.ClipBanker
Gridinsoft	Ransom.Win32.Banker.sa
ZoneAlarm	HEUR:Trojan.MSIL.Shelpak.gen
Microsoft	Trojan:MSIL/ClipBanker.GA!MTB
TACHYON	Trojan/W32.DN-Shelpak.16896
AhnLab-V3	Malware/Win.Trojanspy.C4926237
VBA32	TScope.Trojan.MSIL
ALYac	IL:Trojan.MSILZilla.11518
MAX	malware (ai score=86)
TrendMicro-HouseCall	TrojanSpy.MSIL.CLIPBANKER.SM
Rising	Spyware.ClipBanker!1.D05B (CLASSIC)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/ClipBanker.MO!tr
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/GdSda.A

How to remove IL:Trojan.MSILZilla.11518?

IL:Trojan.MSILZilla.11518 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X