What is “IL:Trojan.MSILZilla.16844”?

The IL:Trojan.MSILZilla.16844 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.16844 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the AsyncRat malware family

How to determine IL:Trojan.MSILZilla.16844?


File Info:
name: C2B8F9A525A358E859E5.mlw
path: /opt/CAPEv2/storage/binaries/18e36e1fd31c9d137a8ec269222032a9aaf6357d8416dc1d03fe71f26dd185c8
crc32: A4D21B97
md5: c2b8f9a525a358e859e55e24a44da920
sha1: 3c3d219f6189d4a8608a5904c8ad39c5359c64e3
sha256: 18e36e1fd31c9d137a8ec269222032a9aaf6357d8416dc1d03fe71f26dd185c8
sha512: ffe434b0e6716a5dc3c2f6d683d3653e5a4510a72f114671b3dd3e689c0895d80bebf435b36b88b731af0e20c1da991d429ad7f4a8614c544ff229a5f4a9a63b
ssdeep: 768:w3yqeZI/AjRmA3Qiby8DIMbhnpwUqoRlND5wNgRFclkbi/fuMPdOWLZ7Yr0Z6Ucx:MeZI/QRJy8DBBpWo1OgRFcSbYfpFrF7A
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T199235B497F988662C79D06BC40B702154BF0E2ABF523EBD63EC860F69E037DA17151E2
sha3_384: c4a34171387046c71bd9b683aab547cb0e12cc546be023148c088e2f2789639db61ed65f08e09f279e8ac3355a497485
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-07-24 02:43:13

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: Stub.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Stub.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.16844 also known as:

Bkav	W32.AIDetectNet.01
DrWeb	BackDoor.AsyncRATNET.2
MicroWorld-eScan	IL:Trojan.MSILZilla.16844
FireEye	Generic.mg.c2b8f9a525a358e8
McAfee	RDN/Generic.dx
Cylance	Unsafe
VIPRE	IL:Trojan.MSILZilla.16844
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.525a35
BitDefenderTheta	Gen:NN.ZemsilF.34592.dm0@a0bTmLn
Cyren	W32/MSIL_Troj.UP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Agent.CTE
APEX	Malicious
ClamAV	Win.Packed.AsyncRAT-9861056-1
Kaspersky	UDS:Backdoor.MSIL.Crysan.gen
BitDefender	IL:Trojan.MSILZilla.16844
Avast	Win32:DropperX-gen [Drp]
Ad-Aware	IL:Trojan.MSILZilla.16844
Emsisoft	IL:Trojan.MSILZilla.16844 (B)
McAfee-GW-Edition	BehavesLike.Win32.Fareit.ph
Trapmine	malicious.moderate.ml.score
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
GData	IL:Trojan.MSILZilla.16844
Google	Detected
Avira	TR/Dropper.Gen
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.C4139220
Acronis	suspicious
ALYac	IL:Trojan.MSILZilla.16844
Malwarebytes	Backdoor.AsyncRAT
Rising	Trojan.Generic/MSIL@AI.97 (RDM.MSIL:JpCQiAkgGw2IAqtewgDzvQ)
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/CoinMiner.CFQ!tr
AVG	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_70% (D)

How to remove IL:Trojan.MSILZilla.16844?

IL:Trojan.MSILZilla.16844 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X