Trojan

IL:Trojan.MSILZilla.23638 malicious file

Malware Removal

The IL:Trojan.MSILZilla.23638 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.23638 virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid

How to determine IL:Trojan.MSILZilla.23638?


File Info:

name: BF21600DBFB3F1CDA6AF.mlw
path: /opt/CAPEv2/storage/binaries/3762cc721a123c04216ad71b8a1d9eca92bb6f4fb424c6df8d8d3ce0d2f559d3
crc32: 7D5F6F36
md5: bf21600dbfb3f1cda6af152b534f81e6
sha1: b0d328a93d4d9bc8662182fd4a23fcf1fa23d13f
sha256: 3762cc721a123c04216ad71b8a1d9eca92bb6f4fb424c6df8d8d3ce0d2f559d3
sha512: 623b20093c61e6f515f07ccbfedf9ff88778d924f1e4cb514a2ab8c5df1816af9ef00cedc3e3120a2251891f6fca93666d8cf2657a6c358cf2f987babf9d86b0
ssdeep: 384:/U45H0BLipbJJAuhq2/rUkTmFPQCiNlEMiptYcFmVc03K:c45mAhL/rU+NlEMGtYcFmVc6K
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CF724D44A1840132EB3B0D7724376B9187379F6F6889DA9E388C731B7FF71426163296
sha3_384: 527100480161a30161e492d7d98c9554f33689e523908fbb09bf49a0489abc3e16d1234b9771de1b9af4e4eff4ab5338
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-10-28 13:13:01

Version Info:

Translation: 0x0000 0x04b0
Comments: TaskSchedulerView
CompanyName: NirSoft
FileDescription: TaskSchedulerView
FileVersion: 1.7.2.0
InternalName: Limyon.exe
LegalCopyright: Copyright © 2015 - 2022 Nir Sofer
LegalTrademarks:
OriginalFilename: Limyon.exe
ProductName: TaskSchedulerView
ProductVersion: 1.7.2.0
Assembly Version: 1.7.2.0

IL:Trojan.MSILZilla.23638 also known as:

BkavW32.AIDetectNet.01
Elasticmalicious (high confidence)
MicroWorld-eScanIL:Trojan.MSILZilla.23638
FireEyeGeneric.mg.bf21600dbfb3f1cd
ALYacIL:Trojan.MSILZilla.23638
BitDefenderThetaGen:NN.ZemsilF.34754.bm0@aS!CZgh
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.NXK
KasperskyHEUR:Trojan-Downloader.MSIL.Agent.gen
BitDefenderIL:Trojan.MSILZilla.23638
CynetMalicious (score: 100)
AvastWin32:DropperX-gen [Drp]
Ad-AwareIL:Trojan.MSILZilla.23638
EmsisoftIL:Trojan.MSILZilla.23638 (B)
McAfee-GW-EditionArtemis
APEXMalicious
GDataIL:Trojan.MSILZilla.23638
AviraTR/Dldr.Agent.lhjym
MAXmalware (ai score=86)
ArcabitIL:Trojan.MSILZilla.D5C56
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!BF21600DBFB3
VBA32Downloader.MSIL.gen.rexp
SentinelOneStatic AI – Suspicious PE
FortinetMSIL/Agent.AGR!tr
AVGWin32:DropperX-gen [Drp]

How to remove IL:Trojan.MSILZilla.23638?

IL:Trojan.MSILZilla.23638 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment