IL:Trojan.MSILZilla.17087 malicious file

The IL:Trojan.MSILZilla.17087 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.17087 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Behavioural detection: Injection (inter-process)
• CAPE detected the shellcode get eip malware family
• Creates a copy of itself
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine IL:Trojan.MSILZilla.17087?

File Info:
name: A7C14A936E9C91BE9C6F.mlw
path: /opt/CAPEv2/storage/binaries/dc76274487f45a49d272cb7493856e62629ad7e95ac961292c89b4defc9367fc
crc32: B36BF906
md5: a7c14a936e9c91be9c6f0c8e154c166c
sha1: 6d5a409d4db1f8e9bafb75c3f474dc939cbee502
sha256: dc76274487f45a49d272cb7493856e62629ad7e95ac961292c89b4defc9367fc
sha512: 1b4d2f4ba01fc49339c5c963545e33d415d60223a8e0e01c6254acb485f24c2821c934f47a498d1e7e966d109fbbf7a6128dc07176a163ea837a5d5acd6a48a2
ssdeep: 49152:77Rrv9nzOUt+JtMOD/KBJuhJcAiMT64XTTcMqiXguiaSCEjyNXTw4+pv19I7tR+I:7trv9zOUtqyOD/+u0AiP4XTTcMqiXXi6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12085F10358508442FDE94230A2FBBB74D3FE3B52775A942EAC562E0920F7BE1B47564B
sha3_384: 744556472fe9723ccebec6fd72e324d2d2262fdca3a3efc0f6a7b15866295e8530e844c5d07a54668b3df1fd701dc1c9
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-01-25 16:34:39

Version Info:
Translation: 0x0000 0x04b0
Comments: IE Per-User Initialization utility
CompanyName: Microsoft Corporation
FileDescription: IE Per-User Initialization utility
FileVersion: 8.0.7601.17514
InternalName: loveness.exe
LegalCopyright: Microsoft Corporation. All rights reserved.
LegalTrademarks: Microsoft Corporatio.
OriginalFilename: loveness.exe
ProductName: Windows Internet Explorer
ProductVersion: 8.0.7601.17514
Assembly Version: 8.0.7601.17514

IL:Trojan.MSILZilla.17087 also known as:

How to remove IL:Trojan.MSILZilla.17087?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.