Should I remove “IL:Trojan.MSILZilla.11636 (B)”?

The IL:Trojan.MSILZilla.11636 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.11636 (B) virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.11636 (B)?


File Info:
name: 8AB17CD96E2C18800293.mlw
path: /opt/CAPEv2/storage/binaries/b30abecc5ac7ae75d9ed7898596f8e0999d34f95cd6743a6452bce089aebeb96
crc32: B4FFC7A5
md5: 8ab17cd96e2c188002937e701c237aa6
sha1: 6f9cd607c9efecbeadbffa9ab905c22827ae3d6d
sha256: b30abecc5ac7ae75d9ed7898596f8e0999d34f95cd6743a6452bce089aebeb96
sha512: 86b2fd6721ecc87b6732c2e2cb1e7d54ecfd8bbabd2e71bd9a140e23e52a725abec5ac86a0c454d3b4ca82244efffd800e33f86e2e6bf0bd929be03acbdb17e6
ssdeep: 6144:jRLOJ2hlXIpeobPt6J1A3qV6Vhl00VSLNDbDJRUw3B1z:jRLPIpeobPdADiw3z
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A054390427F88A55F5BF5BB9D4B21150C371B062A87FEB8E1E9460EA2C73390CD45BA7
sha3_384: 0d7bb5b2e753c2b88bd347797d72c9679d79c5931bf84dfc5eb9f4ab156f320e17c9f03d25447b3fa4bfab13f410d212
ep_bytes: ff250020400010111200080709060a05
timestamp: 2049-11-06 23:33:31

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: saintgang
FileVersion: 1.0.0.0
InternalName: saintgang.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: saintgang.exe
ProductName: saintgang
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.11636 (B) also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	IL:Trojan.MSILZilla.11636
FireEye	Generic.mg.8ab17cd96e2c1880
Sangfor	Trojan.Win32.Save.a
BitDefender	IL:Trojan.MSILZilla.11636
Cybereason	malicious.7c9efe
Cyren	W32/MSIL_Agent.COB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Spy.Agent.AES
APEX	Malicious
ClamAV	Win.Packed.Datastealer-9856291-0
Kaspersky	HEUR:Trojan-PSW.MSIL.Stealer.gen
Avast	Win32:SpywareX-gen [Trj]
Ad-Aware	IL:Trojan.MSILZilla.11636
Sophos	ML/PE-A
DrWeb	Trojan.PWS.DiscordNET.50
Emsisoft	IL:Trojan.MSILZilla.11636 (B)
Ikarus	Trojan.MSIL.Spy
GData	MSIL.Trojan-Stealer.DiscordStealer.D
Avira	HEUR/AGEN.1246450
MAX	malware (ai score=80)
Arcabit	IL:Trojan.MSILZilla.D2D74
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.C4860143
Acronis	suspicious
ALYac	IL:Trojan.MSILZilla.11636
Malwarebytes	Spyware.PasswordStealer
Rising	Spyware.Agent!8.C6 (TFE:dGZlOg3InA1LgWrjBg)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/SpyPSW.AVQ!tr
BitDefenderTheta	Gen:NN.ZemsilF.34742.sm0@aqleq@i
AVG	Win32:SpywareX-gen [Trj]

How to remove IL:Trojan.MSILZilla.11636 (B)?

IL:Trojan.MSILZilla.11636 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X