IL:Trojan.MSILZilla.23211 information

The IL:Trojan.MSILZilla.23211 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.23211 virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.23211?


File Info:
name: 93C6130576B30769CC62.mlw
path: /opt/CAPEv2/storage/binaries/114ad16d9eaf6f0d0cade0acc2ceac5d3792e5776ea4c05f4d6f304079432a0e
crc32: 5C024D48
md5: 93c6130576b30769cc623f1b4b56c104
sha1: 028409b11f7e9d6a3481a4941aed6ea6fd908597
sha256: 114ad16d9eaf6f0d0cade0acc2ceac5d3792e5776ea4c05f4d6f304079432a0e
sha512: 263e8d6b34699efd8c33c8079bd62df34c707dbacfeaffb6bde8a973e4b5f8e61854c549b244b50bdb2847a301f7c7e83eeab7c919f567f05692fcaf7977fc53
ssdeep: 98304:EvpLcBCVv0w/DgDWhbGin4PZvGUA9DHoknQjaahbRCdXNoi5gGvK2P:EdWCmnObBn4PZOhVHoknSRCX9Tvx
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FD3633F4CAF9F8A0F20970B2B04C753C3BEB5D0ECD681859E957E61A24615D224E9F27
sha3_384: f4acda66d4b0004f6e865e67f8d2d60d247a9f7770b81bc2974e7de6aef2cc841384691595e9a8f4feb4e6aa8563802a
ep_bytes: ff250020400000000000000000000000
timestamp: 2091-08-10 17:39:08

Version Info:
Translation: 0x0000 0x04b0
Comments: Defraggler
CompanyName: Piriform Software Ltd
FileDescription: Defraggler
FileVersion: 2.22.33.995
InternalName: Bpbim.exe
LegalCopyright: Copyright © 2005-2020 Piriform Software Ltd
LegalTrademarks: 
OriginalFilename: Bpbim.exe
ProductName: Defraggler
ProductVersion: 2.22.33.995
Assembly Version: 2.22.33.995

IL:Trojan.MSILZilla.23211 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.23211
FireEye	Generic.mg.93c6130576b30769
Cybereason	malicious.11f7e9
Symantec	MSIL.Downloader!gen8
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.NKP
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	IL:Trojan.MSILZilla.23211
Avast	FileRepMalware
Ad-Aware	IL:Trojan.MSILZilla.23211
Emsisoft	IL:Trojan.MSILZilla.23211 (B)
VIPRE	IL:Trojan.MSILZilla.23211
Trapmine	malicious.moderate.ml.score
Sophos	Troj/DwnLd-AFX
GData	IL:Trojan.MSILZilla.23211
Avira	TR/Dropper.MSIL.Gen
Arcabit	IL:Trojan.MSILZilla.D5AAB
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
VBA32	Downloader.MSIL.gen.rexp
ALYac	Gen:Variant.Lazy.245305
MAX	malware (ai score=84)
Malwarebytes	Trojan.Downloader
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.LYU!tr
BitDefenderTheta	Gen:NN.ZemsilF.34682.@p0@ayi!XAe
AVG	FileRepMalware
Panda	Trj/GdSda.A

How to remove IL:Trojan.MSILZilla.23211?

IL:Trojan.MSILZilla.23211 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X