Categories: Trojan

IL:Trojan.MSILZilla.12224 removal tips

The IL:Trojan.MSILZilla.12224 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.12224 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Creates RWX memory
Guard pages use detected – possible anti-debugging.
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Steals private information from local Internet browsers

How to determine IL:Trojan.MSILZilla.12224?


File Info:
name: D938A75D93C20790B1F2.mlwpath: /opt/CAPEv2/storage/binaries/e75eb656871bff48794c06f3c34cebc6238436229cd2c8ecebde7cdebebf0e0dcrc32: 06FAE8EBmd5: d938a75d93c20790b1f2b5d5b7294895sha1: 6c3717af68f89b05724a507d086c2d5729f81b2asha256: e75eb656871bff48794c06f3c34cebc6238436229cd2c8ecebde7cdebebf0e0dsha512: 89f6d6f14b9fa13f472f7321cad508dc74cc62aded553d9057f0b05bf5bc779c860ebd274852fcf4b046d2b12ab17314564b2885c30d615da9c6314e0e613d99ssdeep: 24576:q9ujYz4zzpXDLD02vjh/w6Fv5jWCDmt2H4WQA:XI6DdvBWCg2YWQtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B8059DC3A6DB41F0EE8A19742073AB377E3576014212CED7EAD43D459D52253A37B38Asha3_384: 70ed3fd40b150793ac0a741bb64eed2658c2f6ef31aa5e20fc69cbed42e8095194aba974fc3d22b397d1295c0c9ff0daep_bytes: ff250020400000000000000000000000timestamp: 2015-12-16 20:04:10
Version Info:
Translation: 0x0000 0x04b0CompanyName: MicrosoftFileDescription: Microsoft Firewall UpdateFileVersion: 1.0.0.0InternalName: chrome_update.exeLegalCopyright: Microsoft Copyright © Microsoft 2015OriginalFilename: chrome_update.exeProductName: MicrosoftProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.12224 also known as:

MicroWorld-eScan	IL:Trojan.MSILZilla.12224
FireEye	Generic.mg.d938a75d93c20790
CAT-QuickHeal	Trojan.Generic.S8827823
McAfee	GenericRXRO-KO!D938A75D93C2
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Infostealer.MSIL.Mintluks.A
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	TrojanPSW:MSIL/MsilSteal.be3b1f93
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
BitDefenderTheta	Gen:NN.ZemsilF.34212.0q0@aaP6Jzk
Symantec	Trojan.Gen
ESET-NOD32	a variant of MSIL/Spy.Agent.ANE
TrendMicro-HouseCall	Backdoor.MSIL.CRIMSONRAT.L
Paloalto	generic.ml
Kaspersky	Trojan-PSW.MSIL.Agent.itd
BitDefender	IL:Trojan.MSILZilla.12224
NANO-Antivirus	Trojan.Win32.RiskGen.efxfzw
Avast	Win32:Malware-gen
Tencent	Msil.Trojan-qqpass.Qqrob.Wqwm
Ad-Aware	IL:Trojan.MSILZilla.12224
Sophos	Mal/Generic-R + Mal/MsilSteal-A
Comodo	Malware@#2gel1bq6d8axr
Zillya	Trojan.Agent.Win32.1116074
TrendMicro	Backdoor.MSIL.CRIMSONRAT.L
McAfee-GW-Edition	GenericRXRO-KO!D938A75D93C2
Emsisoft	IL:Trojan.MSILZilla.12224 (B)
Ikarus	Trojan.MSIL.Spy
GData	IL:Trojan.MSILZilla.12224
Jiangmin	Trojan.PSW.MSIL.avbr
Avira	HEUR/AGEN.1204102
Antiy-AVL	Trojan/Generic.ASMalwS.19E8710
Kingsoft	Win32.PSWTroj.Agent.i.(kcloud)
ZoneAlarm	Trojan-PSW.MSIL.Agent.itd
Microsoft	Backdoor:Win32/Bladabindi!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Agent.R177405
ALYac	Trojan.Spy.MSIL.Crimson
MAX	malware (ai score=100)
Cylance	Unsafe
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.94 (RDM.MSIL:P1SGUy8UDwHb315B8wezjQ)
Yandex	Trojan.Rogue!bJSQQZFvtB8
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Agent.A!tr.spy
AVG	Win32:Malware-gen
Cybereason	malicious.d93c20
Panda	Trj/GdSda.A