IL:Trojan.MSILZilla.11696 (B) information

The IL:Trojan.MSILZilla.11696 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.11696 (B) virus can do?

Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.11696 (B)?


File Info:
name: 8E589AD81045A4FC4720.mlw
path: /opt/CAPEv2/storage/binaries/f060aaa915111898f360d447d465b7259b6e02f0d01b8cbd9df9c416eab02b38
crc32: 76FEB61E
md5: 8e589ad81045a4fc47200fecc7e07ee3
sha1: 28cfc90718a20a18c69c2ca6962cd8e26c7a92a5
sha256: f060aaa915111898f360d447d465b7259b6e02f0d01b8cbd9df9c416eab02b38
sha512: 412347daca6e4b009e50d68dea010d370b2f6ed17504225b64df7eab8e849367f599fd03ca4dfef650f3d8b7caac12025f3a0c6672d422280f04c7c003cfd6f0
ssdeep: 96:X9Vbad0uD6c7MNeKD63cVFw25EEBcTXLmmK7glLglRjASt/ZUq9ZYLzNt:PbgDuN53mESw2KDthDC
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T148F1E715F7FC4623F8BF0B724C7396454379B7825C22EF9E25C8511F2826B448A6277A
sha3_384: 197455d99bcf3f0f056808212386141c1bc8155b9b0089f2b1e906992d68596c134fb87d333a0e8ad88f5de3dcd764d0
ep_bytes: ff250020400000000000000000000000
timestamp: 2098-12-24 23:25:35

Version Info:
Translation: 0x0000 0x04b0
Comments: Naturalapp
CompanyName: NaturesApps
FileDescription: RExploStealer
FileVersion: 1.0.0.0
InternalName: RExploStealer.exe
LegalCopyright: Copyright © NatureOne 2019
LegalTrademarks: 
OriginalFilename: RExploStealer.exe
ProductName: NatureOne
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.11696 (B) also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
FireEye	IL:Trojan.MSILZilla.11696
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
Malwarebytes	Spyware.PasswordStealer.MSIL
VIPRE	IL:Trojan.MSILZilla.11696
Symantec	MSIL.Downloader!gen7
ESET-NOD32	a variant of MSIL/PSW.Agent.SIX
APEX	Malicious
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender	IL:Trojan.MSILZilla.11696
MicroWorld-eScan	IL:Trojan.MSILZilla.11696
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	IL:Trojan.MSILZilla.11696
Emsisoft	IL:Trojan.MSILZilla.11696 (B)
Ikarus	Trojan.MSIL.PSW
GData	IL:Trojan.MSILZilla.11696
Avira	HEUR/AGEN.1240908
Arcabit	IL:Trojan.MSILZilla.D2DB0
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.Agensla.C4554800
ALYac	IL:Trojan.MSILZilla.11696
MAX	malware (ai score=89)
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:rFHRgzEtgE2BjmPpkNdLhQ)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.SIX!tr
BitDefenderTheta	Gen:NN.ZemsilF.34646.am0@aGHYP@p
AVG	Win32:MalwareX-gen [Trj]

How to remove IL:Trojan.MSILZilla.11696 (B)?

IL:Trojan.MSILZilla.11696 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X