IL:Trojan.MSILZilla.2627 removal tips

The IL:Trojan.MSILZilla.2627 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.2627 virus can do?

Network activity detected but not expressed in API logs

How to determine IL:Trojan.MSILZilla.2627?


File Info:
crc32: 4B488C56
md5: ab6d47b803c884e01bc30063d0a63306
name: AB6D47B803C884E01BC30063D0A63306.mlw
sha1: 727412c66c18a786b297b530c969fb58c44f63e1
sha256: 58601e8ec143c312844e735687eb6d1c922d12318a081f62db09caeba029b5f4
sha512: 96ed9808bdf36f9566271a8489c6f47d6033838defd91b1d8268ea252e95a4ed73b9e5112903005932f10743a2c8c73375f251119bdb5d4bd8fb830b9556e29a
ssdeep: 1536:shp5LrUwk4Xq0Wd9L5ZoViGbbjw/7bWvGdZVclN:shp5LrUwk4XqdzZo4Gbbj+WmzY
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 1.0.7.0
InternalName: Client.exe
FileVersion: 1.0.7.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 1.0.7.0
FileDescription: 
OriginalFilename: Client.exe

IL:Trojan.MSILZilla.2627 also known as:

Elastic	malicious (high confidence)
DrWeb	BackDoor.AsyncRATNET.2
ClamAV	Win.Packed.Samas-8025724-0
CAT-QuickHeal	Backdoor.AsyncratFC.S22017128
ALYac	IL:Trojan.MSILZilla.2627
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cyren	W32/MSIL_Agent.BTI.gen!Eldorado
ESET-NOD32	a variant of MSIL/Agent.CFQ
APEX	Malicious
Avast	Win32:BackdoorX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Backdoor.MSIL.DcRat.gen
BitDefender	IL:Trojan.MSILZilla.2627
MicroWorld-eScan	IL:Trojan.MSILZilla.2627
Ad-Aware	IL:Trojan.MSILZilla.2627
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34236.dm0@ai28vIp
McAfee-GW-Edition	BehavesLike.Win32.Generic.km
FireEye	Generic.mg.ab6d47b803c884e0
Emsisoft	IL:Trojan.MSILZilla.2627 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor.MSIL.fcvf
Avira	HEUR/AGEN.1121272
eGambit	Unsafe.AI_Score_99%
Microsoft	Backdoor:MSIL/AsyncRat.AD!MTB
GData	MSIL.Backdoor.DCRat.C
AhnLab-V3	Trojan/Win.Agent.C4526491
McAfee	GenericRXOW-GX!AB6D47B803C8
MAX	malware (ai score=88)
Malwarebytes	Backdoor.Agent.MSIL.Generic
Panda	Trj/GdSda.A
Rising	Backdoor.AsyncRAT!1.C3F4 (CLASSIC)
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/CoinMiner.CFQ!tr
AVG	Win32:BackdoorX-gen [Trj]

How to remove IL:Trojan.MSILZilla.2627?

IL:Trojan.MSILZilla.2627 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X