Trojan

IL:Trojan.MSILZilla.11604 (B) removal instruction

Malware Removal

The IL:Trojan.MSILZilla.11604 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.11604 (B) virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.11604 (B)?


File Info:

name: 50D54781E23B65EB508E.mlw
path: /opt/CAPEv2/storage/binaries/870642329265bcf8f7ffc2a8b20b78ace4a03f7925564f635e161cf889cfefff
crc32: EE1343D8
md5: 50d54781e23b65eb508ea3141e9cb9ba
sha1: 1ba0fbacf8b43ed921ddec370bbc8ad46f58b188
sha256: 870642329265bcf8f7ffc2a8b20b78ace4a03f7925564f635e161cf889cfefff
sha512: f73590818a05ed669dff7ad83c2aa682f3827143d4b31d22439843c894eb7c10da1f33caea0b09780f4f9f72cc4b42c4fc1212c2ea67fd501904ccc59483a63e
ssdeep: 49152:nI0jQLZx6ZQTovI7LlJAdEfEisCwP9n/kaJ2JLx9dDqsf0lqDw6:I0UP6ZQTIIfZEiyPV/kW6dmsOYw6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T109A523E93389CC04E23D6736E6A305B3A4F02D875763E51EAEC97EE073752412B46653
sha3_384: 5cac05a6cd6fc807c98a50016133f63d944fcc89abfd61f5151f36304e92ac2f8669d47ea406d3bb9335c52cced58466
ep_bytes: ff250020001000000000000000000000
timestamp: 2085-07-24 08:28:54

Version Info:

Comments: Valve Corporation
CompanyName: Valve Corporation
FileDescription: Steam Client Bootstrapper
FileVersion: 6.7.87.15
LegalCopyright: Copyright (C) 2010 Valve Corporation
OriginalFilename: Steam Client Bootstrapper.exe
ProductName: Steam Client Bootstrapper
ProductVersion: 1.0.0.1
Assembly Version: 1.0.0.1
LegalTrademarks: dc09846b 7d59 43b9 9e2a c3fc79f2ceea
Translation: 0x0409 0x0514

IL:Trojan.MSILZilla.11604 (B) also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Androm.m!c
MicroWorld-eScanIL:Trojan.MSILZilla.11604
FireEyeGeneric.mg.50d54781e23b65eb
SkyhighPWS-FCRN!50D54781E23B
McAfeePWS-FCRN!50D54781E23B
Cylanceunsafe
VIPREIL:Trojan.MSILZilla.11604
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaBackdoor:MSIL/NanoBot.8d914433
K7GWTrojan ( 00570b0d1 )
K7AntiVirusTrojan ( 00570b0d1 )
SymantecDownloader.Trojan
ESET-NOD32a variant of MSIL/Kryptik.YCK
TrendMicro-HouseCallTROJ_GEN.R002C0DB124
KasperskyHEUR:Backdoor.MSIL.Androm.gen
BitDefenderIL:Trojan.MSILZilla.11604
NANO-AntivirusTrojan.Win32.Androm.hziwgp
AvastWin32:DangerousSig [Trj]
TencentWin32.Trojan.FalseSign.Lajl
SophosMal/Generic-S
GoogleDetected
F-SecureHeuristic.HEUR/AGEN.1304202
ZillyaTrojan.Kryptik.Win32.2578942
TrendMicroTROJ_GEN.R002C0DB124
EmsisoftIL:Trojan.MSILZilla.11604 (B)
SentinelOneStatic AI – Malicious PE
JiangminBackdoor.MSIL.drsb
VaristW32/MSIL_Troj.YW.gen!Eldorado
AviraHEUR/AGEN.1304202
Antiy-AVLTrojan/MSIL.Kryptik
MicrosoftBackdoor:MSIL/NanoBot.PA!MTB
ArcabitIL:Trojan.MSILZilla.D2D54
ZoneAlarmHEUR:Backdoor.MSIL.Androm.gen
GDataIL:Trojan.MSILZilla.11604
ALYacIL:Trojan.MSILZilla.11604
MAXmalware (ai score=86)
VBA32TScope.Trojan.MSIL
MalwarebytesMachineLearning/Anomalous.100%
PandaTrj/GdSda.A
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL2:ctl0tE8+PsCAxwYw7FvYfg)
IkarusTrojan-Downloader.MSIL.Agent
MaxSecureTrojan.Malware.73691364.susgen
FortinetMSIL/GenKryptik.ESHC!tr
AVGWin32:DangerousSig [Trj]
Cybereasonmalicious.1e23b6
DeepInstinctMALICIOUS
alibabacloudBackdoor:MSIL/Androm.gen

How to remove IL:Trojan.MSILZilla.11604 (B)?

IL:Trojan.MSILZilla.11604 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment