Categories: Trojan

About “IL:Trojan.MSILZilla.13011” infection

The IL:Trojan.MSILZilla.13011 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.13011 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Creates RWX memory
Guard pages use detected – possible anti-debugging.
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.13011?


File Info:
name: C67AD184E1F9D64FFBD9.mlwpath: /opt/CAPEv2/storage/binaries/648878af1fb82c31a87b8ef45b8ba55f9a6ff6ae256cee4ee2777845d3ff99f9crc32: 8A27C26Emd5: c67ad184e1f9d64ffbd960129ad26471sha1: 077c50dcd5d413b8ddac4b0f9ae011baab32c41dsha256: 648878af1fb82c31a87b8ef45b8ba55f9a6ff6ae256cee4ee2777845d3ff99f9sha512: 79380fee611b4753eecb0f6b64c8cc0ce2f15f08e3a6d7ad660a0cbf97440713afe535f4d3cedbfeab3a086c368ffd1bb7769cf45c1f676fb9c7d9ff95e8db11ssdeep: 6144:GC28SK0skd8ZRXu/7+QxDiM5snMvB0EmKLZPDvOBpqgOMqwnk:d7iskd8Zq7hf3bvOBpXqwktype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19AB47C2077F88722E1BE2737D0B9551543F1E862A1FBEB1E686468FA1D437417E203A7sha3_384: 3ce7f9dbd9037e3e1221a4780546629bd83ade1c59b7cb3855299356c52802df088f17317060518e4dcce3c38d1059f4ep_bytes: ff250020400000000000000000000000timestamp: 2080-12-27 03:52:24
Version Info:
Translation: 0x0000 0x04b0Comments: off_y752kCNqX7mUXREBCompanyName: off_y752kCNqX7mUXREBFileDescription: off_y752kCNqX7mUXREBFileVersion: 0.2.1.0InternalName: poweroff.exeLegalCopyright: Copyright ©  2022LegalTrademarks: OriginalFilename: poweroff.exeProductName: off_y752kCNqX7mUXREBProductVersion: 0.2.1.0Assembly Version: 0.1.5.3

IL:Trojan.MSILZilla.13011 also known as:

Lionic	Adware.MSIL.Csdi.2!c
Elastic	malicious (high confidence)
DrWeb	Adware.WizzMonetize.1
MicroWorld-eScan	IL:Trojan.MSILZilla.13011
FireEye	Generic.mg.c67ad184e1f9d64f
CAT-QuickHeal	Trojan.Csdimonetize
McAfee	RDN/Generic PUP.x
Cylance	Unsafe
Sangfor	Adware.Win32.Csdi.gen
K7AntiVirus	Adware ( 005684bb1 )
Alibaba	AdWare:MSIL/CsdiMonetize.f92dfacb
K7GW	Adware ( 005684bb1 )
BitDefenderTheta	Gen:NN.ZemsilF.34232.Gq0@aact8Vf
Cyren	W32/Trojan.HULZ-0517
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Adware.CsdiMonetize.BC
TrendMicro-HouseCall	TROJ_GEN.R002C0PB622
Paloalto	generic.ml
Kaspersky	not-a-virus:HEUR:AdWare.MSIL.Csdi.gen
BitDefender	IL:Trojan.MSILZilla.13011
Avast	Win32:AdwareX-gen [Adw]
Tencent	Msil.Adware.Csdi.Syhu
Ad-Aware	IL:Trojan.MSILZilla.13011
Sophos	Generic PUA AH (PUA)
Zillya	Adware.Csdi.Win32.536
TrendMicro	TROJ_GEN.R002C0PB622
McAfee-GW-Edition	RDN/Generic PUP.x
Emsisoft	IL:Trojan.MSILZilla.13011 (B)
Ikarus	AdWare.MSIL.Csdimonetize
GData	IL:Trojan.MSILZilla.13011
Avira	HEUR/AGEN.1203820
MAX	malware (ai score=99)
Antiy-AVL	Trojan/Generic.ASMalwS.3521463
Gridinsoft	Ransom.Win32.Sabsik.sa
ViRobot	Adware.Csdimonetize.537600.A
Microsoft	Backdoor:Win32/Bladabindi!ml
Cynet	Malicious (score: 99)
ALYac	IL:Trojan.MSILZilla.13011
VBA32	TScope.Trojan.MSIL
Malwarebytes	Adware.Csdimonetize
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.92 (RDM.MSIL:E7rxzpgNb2ZpMeUAn7HYFQ)
Yandex	PUA.Csdi!Jgvbl/fnnwA
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.74215634.susgen
Fortinet	Adware/CsdiMonetize
Webroot	W32.Adware.Gen
AVG	Win32:AdwareX-gen [Adw]
Panda	Trj/GdSda.A