IL:Trojan.MSILZilla.17425 removal tips

The IL:Trojan.MSILZilla.17425 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.17425 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.17425?


File Info:
name: E8736DC6C665850995CE.mlw
path: /opt/CAPEv2/storage/binaries/be0c6d2bf009289d8a9636a21ff72258ee821f8095b5834cf98aef653aa230c6
crc32: DC147428
md5: e8736dc6c665850995ce13dfe5ba1af4
sha1: 2556e31efb202dab498a52f6c0f7de88afe84e84
sha256: be0c6d2bf009289d8a9636a21ff72258ee821f8095b5834cf98aef653aa230c6
sha512: 9e7800ba03d9eefc3e168e45388b5ec9aa733e2f434462bf10280f914fb2a38a836219335318688a016361ee822519bfd488549826e9a4b727d7d902dc6a1409
ssdeep: 49152:28Tq24GjdGSbw+W7SCRnVQTElvMQUf2qrK6k+oKeMiKr1a+2tqgSE+1q4+:2dEjdGSUdtyQfF+oKrRbwqgE1q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13CC5234C73E80E40E2FE2B74C4F2153457B1E9E21450E1CD2B5D2B194B2A789ADA7B6F
sha3_384: dda1bd6c0c33b9e618a495b5cd97051a2bf8e5587d420e8074dfdced413c1843931788ab1dc7fe4898f7efa551089f80
ep_bytes: ff250020400000000000000000000000
timestamp: 2053-05-06 15:03:16

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Stealerium
FileVersion: 1.0.0.0
InternalName: stub.exe
LegalCopyright: Copyright © https://github.com/kgnfth 2022
LegalTrademarks: 
OriginalFilename: stub.exe
ProductName: Stealerium
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.17425 also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.17425
Cylance	Unsafe
BitDefender	IL:Trojan.MSILZilla.17425
Cybereason	malicious.efb202
Cyren	W32/Stealer.AK.gen!Eldorado
ESET-NOD32	a variant of MSIL/PSW.Agent.RXP
APEX	Malicious
ClamAV	Win.Malware.Jundrop-6848076-0
Kaspersky	HEUR:Trojan-PSW.MSIL.Stealer.gen
Rising	Stealer.Agent!1.D483 (CLASSIC)
Ad-Aware	IL:Trojan.MSILZilla.17425
Sophos	ML/PE-A
DrWeb	Trojan.PWS.StealerNET.102
FireEye	Generic.mg.e8736dc6c6658509
Emsisoft	IL:Trojan.MSILZilla.17425 (B)
GData	MSIL.Trojan-Stealer.DataStealer.B
Avira	TR/Dropper.Gen
MAX	malware (ai score=87)
Arcabit	IL:Trojan.MSILZilla.D4411
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	IL:Trojan.MSILZilla.17425
Malwarebytes	MachineLearning/Anomalous.100%
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.RXP!tr.pws
BitDefenderTheta	Gen:NN.ZemsilF.34638.Eo0@aK1SNJaG
AVG	Win32:KeyloggerX-gen [Trj]
Avast	Win32:KeyloggerX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (D)

How to remove IL:Trojan.MSILZilla.17425?

IL:Trojan.MSILZilla.17425 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X