Categories: Trojan

IL:Trojan.MSILZilla.11604 removal guide

The IL:Trojan.MSILZilla.11604 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.11604 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.11604?


File Info:
name: AD5CF5ABAFDC66CC72CF.mlwpath: /opt/CAPEv2/storage/binaries/bd94508c4c651c60e3ffa738aab48a9aca62a6f0af1c11beccb5db4ab1a4f1dfcrc32: 8C3608A5md5: ad5cf5abafdc66cc72cf7543799012cbsha1: ec2eb3fd5c8f1897ec071174822e24bdd96e4223sha256: bd94508c4c651c60e3ffa738aab48a9aca62a6f0af1c11beccb5db4ab1a4f1dfsha512: 95ceb9194dbd6fde910fe310469e65ae4f4c1535ce6edee21db8285c4683079d184844959c4ca66d4f03d687087117a1a8d1673aff38b76ee4837ded63ea0313ssdeep: 1536:cOrodUXlMv9QqLnSnUe4nfDxngLNXTemXtTjWKMj9lvCow1mzAoU0tUfw:X4RLnSnURNngLdfXtG9p7EmzAktype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CF2433312F9DDC3AD0AACFF5E1422225F675DE4E8D87C945C9FD26ABC432EC06815A24sha3_384: 74bb487923d871ac0c1c7f8930f7b0ac81c39c765f4c319aeb7461f8b65aff84cb4384847d13e79364e1826b0fefd5faep_bytes: ff250020400000000000000000000000timestamp: 2057-10-06 21:39:23
Version Info:
Comments: CompanyName: Adobe Systems Inc.FileDescription: Adobe Acrobat Reader DCFileVersion: 20.9.20065.55827LegalCopyright: 1984-2020 Adobe Systems Inc.OriginalFilename: AcroRd32.exeProductName: Adobe Acrobat Reader DCProductVersion: 20.9.20065.383507Assembly Version: 20.9.20065.383507LegalTrademarks: Translation: 0x0409 0x0514

IL:Trojan.MSILZilla.11604 also known as:

Lionic	Trojan.MSIL.PowerShell.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.11604
McAfee	RDN/Generic Downloader.x
Malwarebytes	Generic.Malware/Suspicious
Zillya	Trojan.PowerShell.Win32.321
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 005709b41 )
Alibaba	Trojan:MSIL/PowerShell.027a0bf4
K7GW	Trojan-Downloader ( 005709b41 )
Symantec	Downloader.Trojan
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.GVS
Zoner	Trojan.Win32.100244
APEX	Malicious
Kaspersky	HEUR:Trojan.MSIL.PowerShell.gen
BitDefender	IL:Trojan.MSILZilla.11604
NANO-Antivirus	Trojan.Win32.PowerShell.hzfmih
Avast	Win32:Trojan-gen
Tencent	Msil.Trojan-Downloader.Ader.Qsmw
Emsisoft	IL:Trojan.MSILZilla.11604 (B)
DrWeb	Trojan.DownLoader34.61745
VIPRE	IL:Trojan.MSILZilla.11604
McAfee-GW-Edition	RDN/Generic Downloader.x
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.ad5cf5abafdc66cc
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.MSIL.Agent
GData	IL:Trojan.MSILZilla.11604
Webroot	W32.Trojan.Gen
Arcabit	IL:Trojan.MSILZilla.D2D54
ZoneAlarm	HEUR:Trojan.MSIL.PowerShell.gen
Microsoft	Ransom:Win32/Ako
Google	Detected
AhnLab-V3	Trojan/Win32.RL_Agent.R363599
BitDefenderTheta	Gen:NN.ZemsilF.36662.nm1@aKOiI3li
ALYac	IL:Trojan.MSILZilla.11604
MAX	malware (ai score=85)
VBA32	TScope.Trojan.MSIL
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Downloader.Agent!8.B23 (CLOUD)
Yandex	Trojan.PowerShell!Tln9E5dXYAY
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.74168641.susgen
Fortinet	MSIL/Agent.GZW!tr.dldr
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)