About “IL:Trojan.MSILZilla.15419” infection

The IL:Trojan.MSILZilla.15419 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.15419 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.15419?


File Info:
name: 8260DC6E7BD1C98A3F5D.mlw
path: /opt/CAPEv2/storage/binaries/18ecc45e9bb3ebd49173f57f7a284db5547bbcf390d8b196bdd5bfa0a3733dac
crc32: F621F42F
md5: 8260dc6e7bd1c98a3f5dd6b8671bbe81
sha1: 3dffeb8779fc4d2baeefa73f7ba7072dcd9d4890
sha256: 18ecc45e9bb3ebd49173f57f7a284db5547bbcf390d8b196bdd5bfa0a3733dac
sha512: eb662324a069a02f11917d98ffcc238f8e9121c5d6a827d2d5e6e15f303da82e6e691f8a06583045835b1b15f53f3d5fe90b7410bf6b716163da489c253e0639
ssdeep: 12288:eAs3X3GAYy+vKe3wXw04n/C1LR4dhfgXu16iz8W+DJOqs:eASX3GNy+vR3w5eKr4dhIXud1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D4D4081EFA401559C50CE6F48023687F1336EA8FE9419EE96E9EF1D4ED8235CEE06463
sha3_384: b18e1c732452341da52994cb4fca40248e5b8d0f1cb6e215af0da1ee263350f38d268b054b5fd69aea815a9681009c46
ep_bytes: ff250020400000000000000000000000
timestamp: 2061-01-19 15:45:54

Version Info:
Translation: 0x0000 0x04b0
Comments: 44 CALIBER
CompanyName: 44 CALIBER
FileDescription: 44 CALIBER
FileVersion: 1.6.2.0
InternalName: Insidious.exe
LegalCopyright: FuckTheSystem Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Insidious.exe
ProductName: 44 CALIBER
ProductVersion: 1.6.2.0
Assembly Version: 1.6.2.0

IL:Trojan.MSILZilla.15419 also known as:

Bkav	W32.AIDetectNet.01
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
McAfee	Trojan-FRAX!8260DC6E7BD1
Sangfor	Suspicious.Win32.Save.a
BitDefender	IL:Trojan.MSILZilla.15419
K7GW	Password-Stealer ( 0057016e1 )
K7AntiVirus	Password-Stealer ( 0057016e1 )
Cyren	W32/MSIL_Agent.BWD.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Spy.Agent.CWQ
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan-PSW.MSIL.Agensla.gen
MicroWorld-eScan	IL:Trojan.MSILZilla.15419
Ad-Aware	IL:Trojan.MSILZilla.15419
Sophos	Mal/PWS-JU
McAfee-GW-Edition	BehavesLike.Win32.Generic.jh
FireEye	Generic.mg.8260dc6e7bd1c98a
Emsisoft	Trojan-PSW.Agent (A)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1203010
MAX	malware (ai score=89)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	IL:Trojan.MSILZilla.D3C3B
GData	IL:Trojan.MSILZilla.15419
AhnLab-V3	Trojan/Win.Stealgen.C4572480
Acronis	suspicious
ALYac	IL:Trojan.MSILZilla.15419
Malwarebytes	Spyware.PasswordStealer.44
Ikarus	Trojan.MSIL.Spy
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZemsilF.34638.Lm0@aWTQGeb
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.779fc4

How to remove IL:Trojan.MSILZilla.15419?

IL:Trojan.MSILZilla.15419 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X