IL:Trojan.MSILZilla.14577 (B) removal tips

The IL:Trojan.MSILZilla.14577 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.14577 (B) virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous .NET characteristics
CAPE detected the Mercurial malware family

How to determine IL:Trojan.MSILZilla.14577 (B)?


File Info:
name: A7B0BA5DD962E1BEFB10.mlw
path: /opt/CAPEv2/storage/binaries/2ff6cce6bc586bf54d6519076f1c06041547258edbb0d0ad04e4e064f9f058ae
crc32: AFE2D739
md5: a7b0ba5dd962e1befb10f630e81d169c
sha1: ff0c66b3dd0722f7e908f9aeb327aa28fd8a816a
sha256: 2ff6cce6bc586bf54d6519076f1c06041547258edbb0d0ad04e4e064f9f058ae
sha512: 600ffb58cfc07b6d48c2f51035d140260e3ecbce89e85c3ed2cb3777a30a4ad15319be636f9158fb2772ad15bc028d86172ff9fe2f725d2b4253633c1a2b0c05
ssdeep: 768:SCHLMY+BmbQ0iEYzS2t7ecsuAQAod/jF9vr29afqfgSW3ZsToh28qf:AbfPe2tacpABAFlr29Vx3oc
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D023098933F98610F2FE8E7A98B165104372B553AE23D64D0EE1A0DD1673F958491BE3
sha3_384: 8a4b07b8d0931d4c876c620b152b08a0ea2f76b451627d7d731ca0957260909fa3af130ebb82d5303449067dc2dd9487
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-04-26 17:21:13

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: output.exe
LegalCopyright:  
OriginalFilename: output.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

IL:Trojan.MSILZilla.14577 (B) also known as:

Bkav	W32.AIDetectNet.01
Cynet	Malicious (score: 100)
Malwarebytes	Generic.Trojan.Injector.DDS
Sangfor	Suspicious.Win32.Save.a
BitDefender	IL:Trojan.MSILZilla.14577
Cyren	W32/MSIL_Kryptik.DGZ.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Spy.Agent.AES
ClamAV	Win.Packed.Mercurial-9945808-0
Kaspersky	HEUR:Trojan-PSW.MSIL.Disco.gen
MicroWorld-eScan	IL:Trojan.MSILZilla.14577
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:9C4vanZW/pV1ijIMeuxQGQ)
Ad-Aware	IL:Trojan.MSILZilla.14577
Emsisoft	IL:Trojan.MSILZilla.14577 (B)
DrWeb	Trojan.PWS.DiscordNET.50
FireEye	Generic.mg.a7b0ba5dd962e1be
Sophos	ML/PE-A
Ikarus	Trojan-Spy.MassLogger
GData	MSIL.Trojan-Stealer.DiscordStealer.D
Arcabit	IL:Trojan.MSILZilla.D38F1
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Disco.gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Trojan/Win.MSILZilla.C5098381
Acronis	suspicious
ALYac	IL:Trojan.MSILZilla.14577
MAX	malware (ai score=81)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZemsilF.34606.cm0@ayeGQ9f
AVG	Win32:SpywareX-gen [Trj]
Avast	Win32:SpywareX-gen [Trj]

How to remove IL:Trojan.MSILZilla.14577 (B)?

IL:Trojan.MSILZilla.14577 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X