Trojan

IL:Trojan.MSILZilla.1923 removal

Malware Removal

The IL:Trojan.MSILZilla.1923 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.1923 virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine IL:Trojan.MSILZilla.1923?


File Info:

crc32: 6706AF3D
md5: 6c7b1d901ea5ae3810ea3887200b4cc0
name: 6C7B1D901EA5AE3810EA3887200B4CC0.mlw
sha1: 5cab0c6b805d00399ed02e6c1d63dc84180877df
sha256: 02321739421cbb09b54d680e335185f7de92b600091b98329513d93105b52cf9
sha512: 4b0694539b3713334457f06cd49d306ef40a0a7868263b9a95c41615ebc0856600ebb38c6aa44a8488a606e151fea95abd789a1e28ca73458cbb23738e605e23
ssdeep: 24576:s6yJMY9UFoRDhkeYM1jJR97zUbia9JVe0hs5WfBiERJchVML1bT6Eg:zY9UORVOM1jJHzaiape0hsABFRJch6Lk
type: PE32 executable (console) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

IL:Trojan.MSILZilla.1923 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0057e7b01 )
LionicTrojan.MSIL.Convagent.i!c
Elasticmalicious (high confidence)
DrWebTrojan.InjectNET.14
CynetMalicious (score: 100)
ALYacIL:Trojan.MSILZilla.1923
CylanceUnsafe
ZillyaTrojan.Agensla.Win32.14019
SangforTrojan.Win32.FormBook.MR
AlibabaTrojanPSW:Win32/FormBook.dae13dc2
K7GWTrojan ( 0057e7b01 )
Cybereasonmalicious.01ea5a
CyrenW32/Androm.BZ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HLLV
APEXMalicious
AvastWin32:RATX-gen [Trj]
ClamAVWin.Dropper.Remcos-9881808-1
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderIL:Trojan.MSILZilla.1923
MicroWorld-eScanIL:Trojan.MSILZilla.1923
TencentMalware.Win32.Gencirc.10ce8b27
Ad-AwareIL:Trojan.MSILZilla.1923
SophosMal/Generic-R + Troj/Agent-BHJD
BitDefenderThetaGen:NN.ZexaF.34266.ynIfaagZsRf
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0DGS21
McAfee-GW-EditionGenericRXPN-WV!6C7B1D901EA5
FireEyeGeneric.mg.6c7b1d901ea5ae38
EmsisoftIL:Trojan.MSILZilla.1923 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.PSW.MSIL.cazz
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Generic.ASMalwS.3442947
MicrosoftTrojan:Win32/FormBook.MR!MTB
GDataIL:Trojan.MSILZilla.1923
AhnLab-V3Trojan/Win.FormBook.R434346
McAfeeGenericRXPN-WV!6C7B1D901EA5
MAXmalware (ai score=87)
VBA32BScope.Backdoor.Bladabindi
MalwarebytesTrojan.Tasker
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DGS21
RisingTrojan.Kryptik!1.D7BD (CLASSIC)
YandexTrojan.Kryptik!rrmukQcsoVc
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.119941441.susgen
FortinetW32/GenKryptik.FGTV!tr
AVGWin32:RATX-gen [Trj]
Paloaltogeneric.ml

How to remove IL:Trojan.MSILZilla.1923?

IL:Trojan.MSILZilla.1923 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment