Trojan

IL:Trojan.MSILZilla.11604 (B) removal guide

Malware Removal

The IL:Trojan.MSILZilla.11604 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.11604 (B) virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine IL:Trojan.MSILZilla.11604 (B)?


File Info:

name: 84A811D9AB50E7A00A5E.mlw
path: /opt/CAPEv2/storage/binaries/5a3b7d4fd1b16495fbf579891c6ad3330c899a357cd65c81f6cdb76c6b5bfda0
crc32: 476E71DB
md5: 84a811d9ab50e7a00a5ee88279d8093f
sha1: 296d4c88bf3ec172d35757c78f853205d1bc419d
sha256: 5a3b7d4fd1b16495fbf579891c6ad3330c899a357cd65c81f6cdb76c6b5bfda0
sha512: b430fa6b96764fa90429a58746e4689db283a148c110933c6481f32da8a0f851cf7baffa65dc74adde3c55f4516750e0c7fb730fea22a43e5f4f06bf009d4017
ssdeep: 768:ehjZm+a0doODu8fplqa/x2VQVMtzkozLUf2hMj5:UkGov8fnqGcp5UfJj5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13D7392906E9D0D3DECA6EA38F9B0B13587217D4D7C6586B80DCCBF4E49615038A633E6
sha3_384: fa1cb239af2605808e97e7b63454f2fa34fc884b29f3475e9027834689b88a804f514549ad2a9b4d31e31d447476c4e3
ep_bytes: ff250020400000000000000000000000
timestamp: 2019-03-28 06:49:30

Version Info:

Comments: 贝艾В 贝В艾
CompanyName: 开贼艾
FileDescription: 维开贝 贼贼维
FileVersion: 1.0.3.4
LegalCopyright: © 贼贼维. All rights reserved.
OriginalFilename: 艾В开 贼艾贼.exe
ProductName: 艾В开 贼艾贼
ProductVersion: 4.5.2.3
Assembly Version: 4.5.2.3
LegalTrademarks: 贝开贼
Translation: 0x0409 0x0514

IL:Trojan.MSILZilla.11604 (B) also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.MSIL.PowerShell.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownloaderNET.93
MicroWorld-eScanIL:Trojan.MSILZilla.11604
FireEyeGeneric.mg.84a811d9ab50e7a0
SkyhighArtemis!Trojan
McAfeeArtemis!84A811D9AB50
MalwarebytesTrojan.MalPack.GZ.Generic
SangforTrojan.MSIL.Agent.GVS
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/PowerShell.d0261c86
K7GWTrojan-Downloader ( 005709b41 )
K7AntiVirusTrojan-Downloader ( 005709b41 )
ArcabitIL:Trojan.MSILZilla.D2D54
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.GVS
CynetMalicious (score: 99)
APEXMalicious
KasperskyHEUR:Trojan.MSIL.PowerShell.gen
BitDefenderIL:Trojan.MSILZilla.11604
NANO-AntivirusTrojan.Win32.PowerShell.hzvqlx
AvastWin32:DangerousSig [Trj]
TencentMsil.Trojan-Downloader.Ader.Fajl
EmsisoftIL:Trojan.MSILZilla.11604 (B)
F-SecureHeuristic.HEUR/AGEN.1304199
VIPREIL:Trojan.MSILZilla.11604
SophosMal/Generic-S
IkarusTrojan-Downloader.MSIL.Agent
WebrootW32.Malware.Gen
VaristW32/MSIL_Troj.YW.gen!Eldorado
AviraHEUR/AGEN.1304199
Antiy-AVLTrojan/MSIL.PowerShell
MicrosoftTrojan:Win32/Ymacco.AA5A
ZoneAlarmHEUR:Trojan.MSIL.PowerShell.gen
GDataIL:Trojan.MSILZilla.11604
GoogleDetected
VBA32Trojan.MSIL.PowerShell
ALYacIL:Trojan.MSILZilla.11604
MAXmalware (ai score=83)
Cylanceunsafe
PandaTrj/GdSda.A
RisingDownloader.Agent!8.B23 (CLOUD)
YandexTrojan.PowerShell!g7mBT6rGh7Y
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.109605072.susgen
FortinetMSIL/Agent.GZW!tr.dldr
AVGWin32:DangerousSig [Trj]
DeepInstinctMALICIOUS

How to remove IL:Trojan.MSILZilla.11604 (B)?

IL:Trojan.MSILZilla.11604 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment