Trojan

How to remove “IL:Trojan.MSILZilla.2523”?

Malware Removal

The IL:Trojan.MSILZilla.2523 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.2523 virus can do?

  • Creates RWX memory
  • A process created a hidden window
  • A scripting utility was executed
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine IL:Trojan.MSILZilla.2523?


File Info:

crc32: C76D8F82
md5: 398584bc097fabb68274352b130cc830
name: 398584BC097FABB68274352B130CC830.mlw
sha1: 155ff5a72befbbfbfe9381b97b656602036beda1
sha256: 214f613579f9edbd9c3dff3debc394d1d2aa0c4ac5c753fa532e0b6a601d30f9
sha512: 8022c77db2e5b8223fd7e8471ffe24825787e20c57f7384be96851f3489c99154f0f97caf5c202ee739e60d9c8550cae642b475b2a3f6a48ef58c5f00b657858
ssdeep: 3072:sTrs4mTFMNxA1NAWAGqAVU64WTQAqNC/SzGa:4bQK
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: Encrypt.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: Encrypt.exe

IL:Trojan.MSILZilla.2523 also known as:

K7AntiVirusTrojan ( 0051717b1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader23.48612
CynetMalicious (score: 100)
ALYacIL:Trojan.MSILZilla.2523
CylanceUnsafe
ZillyaDropper.Agent.Win32.284377
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 0051717b1 )
Cybereasonmalicious.c097fa
CyrenW32/MSIL_Injector.QL.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDropper.Agent.DGE
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderIL:Trojan.MSILZilla.2523
NANO-AntivirusTrojan.Win32.Zusy.exwndc
MicroWorld-eScanIL:Trojan.MSILZilla.2523
TencentWin32.Trojan.Generic.Llhl
Ad-AwareIL:Trojan.MSILZilla.2523
SophosML/PE-A + Mal/Mdrop-KT
ComodoMalware@#30bt8komagbh3
BitDefenderThetaGen:NN.ZemsilF.34294.im0@aW@s6Li
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.cz
FireEyeGeneric.mg.398584bc097fabb6
EmsisoftIL:Trojan.MSILZilla.2523 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.doxvd
AviraTR/Dropper.Gen
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASMalwS.21CD394
MicrosoftBackdoor:MSIL/Bladabindi
ArcabitIL:Trojan.MSILZilla.D9DB
GDataIL:Trojan.MSILZilla.2523
AhnLab-V3Trojan/Win32.Genome.R21136
Acronissuspicious
McAfeeGenericRXCU-XX!398584BC097F
MAXmalware (ai score=80)
VBA32Trojan.Downloader
MalwarebytesTrojan.MalPack
PandaTrj/GdSda.A
YandexTrojan.Agent!rYlYKqnRQbk
IkarusTrojan-Dropper.MSIL.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.DGO!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove IL:Trojan.MSILZilla.2523?

IL:Trojan.MSILZilla.2523 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment