Trojan

IL:Trojan.MSILZilla.11798 removal tips

Malware Removal

The IL:Trojan.MSILZilla.11798 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.11798 virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.11798?


File Info:

name: 2D9EEB4090FFD85E1B89.mlw
path: /opt/CAPEv2/storage/binaries/51ba04cf8d03f121cd32eb4d05beba5391665f386b2e1c6ce5c3a9ee10820889
crc32: DC7FCBB1
md5: 2d9eeb4090ffd85e1b890c9284b885a5
sha1: ed1476ef4f108c95c0590bcec6dd23eaeff6480a
sha256: 51ba04cf8d03f121cd32eb4d05beba5391665f386b2e1c6ce5c3a9ee10820889
sha512: a48feb6c9503c24b77ef454289e223f8d9e482d2a457e29be43b9d06c58749e57646189feefce35456fe96c41815df22edde72d9d4ac1dc1b955f0f75a8f3eab
ssdeep: 6144:Skl3KLl7zI5IVx21o6o0S9/62q8g/0O+CI5IVx21o6o0S9/62q8g/0O+:Sk98l72riHor89TriHor89
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B884AF342FFB580BC2E20EF90AE2D134D6FCD1681D6AC7D354F2456E9E2CE885D8456A
sha3_384: 63b800004e979b0441fe940682ac3f7438a5e95b503f65a74762af145700a87f7518ca7a1d281df9c3a60b897bbd3e71
ep_bytes: ff250020400000000000000000000000
timestamp: 2051-04-29 01:56:23

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName: MenelCompany
FileDescription: MenelSpoofer
FileVersion: 1.0.0.0
InternalName: Auth.GG Winform Example.exe
LegalCopyright: Copyright © 2022
LegalTrademarks:
OriginalFilename: Auth.GG Winform Example.exe
ProductName: MenelSpoofer
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.11798 also known as:

BkavW32.AIDetectNet.01
LionicTrojan.Win32.Zilla.4!c
MicroWorld-eScanIL:Trojan.MSILZilla.11798
FireEyeIL:Trojan.MSILZilla.11798
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
ALYacIL:Trojan.MSILZilla.11798
CylanceUnsafe
SangforRiskware.Win32.Wacapew.C
K7AntiVirusPassword-Stealer ( 0056bda31 )
AlibabaTrojan:MSIL/Discord.1e2065ac
K7GWPassword-Stealer ( 0056bda31 )
CrowdStrikewin/malicious_confidence_60% (W)
ESET-NOD32a variant of MSIL/PSW.Discord.IJ
Paloaltogeneric.ml
BitDefenderIL:Trojan.MSILZilla.11798
AvastWin32:DropperX-gen [Drp]
Ad-AwareIL:Trojan.MSILZilla.11798
DrWebTrojan.PWS.DiscordNET.28
EmsisoftIL:Trojan.MSILZilla.11798 (B)
SentinelOneStatic AI – Suspicious PE
GDataIL:Trojan.MSILZilla.11798
MAXmalware (ai score=84)
MicrosoftTrojan:Win32/Wacatac.B!ml
MalwarebytesRiskWare.Agent.ATH.Generic
TrendMicro-HouseCallTROJ_GEN.R002H0CF622
IkarusTrojan-Downloader.MSIL.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Discord.JK!tr
BitDefenderThetaGen:NN.ZemsilF.34712.ym0@aK4kEgp
AVGWin32:DropperX-gen [Drp]

How to remove IL:Trojan.MSILZilla.11798?

IL:Trojan.MSILZilla.11798 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment