About “IL:Trojan.MSILZilla.11879” infection

The IL:Trojan.MSILZilla.11879 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.11879 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine IL:Trojan.MSILZilla.11879?


File Info:
name: AC785A95030981DBBFB8.mlw
path: /opt/CAPEv2/storage/binaries/593e643538f5fd6509a79926443b350e78121a485a11ac91bc4005e5736c1ebd
crc32: B396F259
md5: ac785a95030981dbbfb8224c6df41b62
sha1: efbd9afadfa5220048202375a2eb6d8c8e892ee0
sha256: 593e643538f5fd6509a79926443b350e78121a485a11ac91bc4005e5736c1ebd
sha512: e10458e80782a19c8769fd71a02cb94f36c7b6412b2ecf674879f56cc33cb86200e26bb27382c69a22c3f79ccbb386bc8467c86524bac30cb0b692b1f3b1a32d
ssdeep: 196608:Qtt0M/bTEXKZoXMBtm3Yhr4T90WgdySa2Trlat:duT5ZeMBtCYhr60S2TY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T115763309B3FC4A11F2FB8BF586B020510BBA786F9165C64D5ED621CA2D71F80991AF37
sha3_384: 9ede9f2337e6b1b7825afa0da42682f7ad569ba214ae53f2aed91d4e92152fc81bc0ed4c9760c734749c5b864e876865
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-09 15:31:24

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: autobot
FileVersion: 1.0.0.0
InternalName: autobot.exe
LegalCopyright: Copyright ©  2015
LegalTrademarks: 
OriginalFilename: autobot.exe
ProductName: autobot
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.11879 also known as:

Lionic	Trojan.Win32.Zilla.4!c
MicroWorld-eScan	IL:Trojan.MSILZilla.11879
FireEye	IL:Trojan.MSILZilla.11879
ALYac	IL:Trojan.MSILZilla.11879
TrendMicro-HouseCall	TROJ_GEN.R002H09L921
Cynet	Malicious (score: 100)
BitDefender	IL:Trojan.MSILZilla.11879
Ad-Aware	IL:Trojan.MSILZilla.11879
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	IL:Trojan.MSILZilla.11879 (B)
Ikarus	Trojan.IL.MSILZilla
Gridinsoft	Ransom.Win32.Sabsik.sa
GData	IL:Trojan.MSILZilla.11879
McAfee	Artemis!AC785A950309
MAX	malware (ai score=82)

How to remove IL:Trojan.MSILZilla.11879?

IL:Trojan.MSILZilla.11879 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X