What is “IL:Trojan.MSILZilla.12009”?

The IL:Trojan.MSILZilla.12009 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.12009 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.12009?


File Info:
name: D6FA3C79E268243CBBCC.mlw
path: /opt/CAPEv2/storage/binaries/72dcf2c733b2804bbc182e03fe410a85d246e49ed3940efe390b61cb5ab055d0
crc32: BE8F9634
md5: d6fa3c79e268243cbbcc0756fb6b0107
sha1: f8cb16e1c525b06a270c49b25cca6360f2e7dee4
sha256: 72dcf2c733b2804bbc182e03fe410a85d246e49ed3940efe390b61cb5ab055d0
sha512: 824d5fd6e1ce080980441cb77870607fe36b24f09d99fa2d8469e31f3aa5c394c7519dd72d0aaba3879d949213918841ef9d15ec6ee6fae9d0efc03113a73b41
ssdeep: 1536:pyCElgp6C9iv3HrV17Jue1xIyX5kZ8Nrfr+BzDdDXBOtqk8HfP1xngBCSXcD0Tb:pyCEqp6C9iv3HrV17JtjS8NLr+BzZDXa
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14683725687C87B2AC92B193844D7821F0B36EB07170DAB8E66504D927726FC36D0BF75
sha3_384: 5fd2ac56722f58f84c9add7456bc605efe29c5aa8f6c5235dc9b39ba387f96a52638d726e2998616015b1339e7f9e983
ep_bytes: ff250020400000000000000000000000
timestamp: 2083-02-19 11:25:56

Version Info:
ProductName: fix-2
FileDescription: fix-2
CompanyName: 
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
Comments: 
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
Translation: 0x0000 0x04e4

IL:Trojan.MSILZilla.12009 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.d6fa3c79e268243c
Cylance	Unsafe
Cybereason	malicious.9e2682
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.CHY
APEX	Malicious
BitDefender	IL:Trojan.MSILZilla.12009
MicroWorld-eScan	IL:Trojan.MSILZilla.12009
Ad-Aware	IL:Trojan.MSILZilla.12009
Emsisoft	IL:Trojan.MSILZilla.12009 (B)
DrWeb	Trojan.PackedNET.620
Sophos	ML/PE-A
Ikarus	Trojan.MSIL.Crypt
GData	IL:Trojan.MSILZilla.12009
Avira	TR/Dropper.Gen
Arcabit	IL:Trojan.MSILZilla.D2EE9
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
BitDefenderTheta	AI:Packer.CF7E9FE426
ALYac	Gen:Variant.Zusy.199645
MAX	malware (ai score=80)
SentinelOne	Static AI – Malicious PE
CrowdStrike	win/malicious_confidence_100% (D)

How to remove IL:Trojan.MSILZilla.12009?

IL:Trojan.MSILZilla.12009 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X