IL:Trojan.MSILZilla.11883 (B) removal guide

The IL:Trojan.MSILZilla.11883 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.11883 (B) virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine IL:Trojan.MSILZilla.11883 (B)?


File Info:
name: 9EB51E3C7C10FE09832A.mlw
path: /opt/CAPEv2/storage/binaries/f83239b1f7ece14e869f76eece62fb6a15ef61010e7d1f934e8b61add6af3202
crc32: 7A831A0B
md5: 9eb51e3c7c10fe09832a3678191bd67c
sha1: 811cdaf7ff206f935034c170b8c57ee2ce7ad7b3
sha256: f83239b1f7ece14e869f76eece62fb6a15ef61010e7d1f934e8b61add6af3202
sha512: a3bac84384829e6e38e3c622c994b63a8c66dacf32d704d132fb907118f7324faeff2c88366abc348ef18b802879c835d224b79655adf0157f1b1f18202e2252
ssdeep: 12288:BxklWEKF+ozX/jVxqM884/FN0mQ0eRiYbjWG1i3K7a0i8WrhLYTlXtui+YdQXW:3eA5tvUZ2G
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B745648B3941827F8BA1C67D00E3885BFDE7EA72B7700514D56C8D24EA193D5BC8D62E
sha3_384: 35dbc27f34e754b4aab11429a93880957875303df4390faaae42c0e78962855f1301f55828d79f38e2181d40e29502f1
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-06 14:37:00

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: WPFlindao
FileVersion: 1.0.0.0
InternalName: WPFlindao.exe
LegalCopyright: Copyright ©  2015
LegalTrademarks: 
OriginalFilename: WPFlindao.exe
ProductName: WPFlindao
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.11883 (B) also known as:

Lionic	Trojan.MSIL.Crypt.4!c
DrWeb	Trojan.Encoder.34674
MicroWorld-eScan	IL:Trojan.MSILZilla.11883
FireEye	Generic.mg.9eb51e3c7c10fe09
ALYac	IL:Trojan.MSILZilla.11883
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/csharp.ali2000008
K7GW	Trojan ( 0058b61f1 )
K7AntiVirus	Trojan ( 0058b61f1 )
BitDefenderTheta	Gen:NN.ZemsilCO.34062.nn0@a44S30g
Cyren	W32/MSIL_Kryptik.GFW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/GenKryptik.FOKP
TrendMicro-HouseCall	TROJ_GEN.R002H0DL621
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Ransom.MSIL.Purgen.gen
BitDefender	IL:Trojan.MSILZilla.11883
Avast	Win32:KeyloggerX-gen [Trj]
Tencent	Win32.Trojan.Lazy.Hxzx
Ad-Aware	IL:Trojan.MSILZilla.11883
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Trojan.tt
SentinelOne	Static AI – Suspicious PE
Emsisoft	IL:Trojan.MSILZilla.11883 (B)
Ikarus	Trojan.MSIL.Krypt
eGambit	Unsafe.AI_Score_99%
Avira	TR/Kryptik.luwbb
Kingsoft	Win32.Troj.Undef.(kcloud)
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	IL:Trojan.MSILZilla.11883
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C4821863
McAfee	AgentTesla-FDFZ!9EB51E3C7C10
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.PCrypt.MSIL.Generic
APEX	Malicious
MAX	malware (ai score=86)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.FOKP!tr
AVG	Win32:KeyloggerX-gen [Trj]
Cybereason	malicious.7ff206
Panda	Trj/GdSda.A

How to remove IL:Trojan.MSILZilla.11883 (B)?

IL:Trojan.MSILZilla.11883 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X