IL:Trojan.MSILZilla.2628 removal guide

The IL:Trojan.MSILZilla.2628 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.2628 virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine IL:Trojan.MSILZilla.2628?


File Info:
name: 5ECB3A25E045E965AC11.mlw
path: /opt/CAPEv2/storage/binaries/53320002e1380de8bc2c807975b6c08e6ffca4376573e483bc332e0d90ced275
crc32: 6F0EDA30
md5: 5ecb3a25e045e965ac116e64e1f17f4f
sha1: 15268106cf757fa68d14adf4987a75b304b72ad0
sha256: 53320002e1380de8bc2c807975b6c08e6ffca4376573e483bc332e0d90ced275
sha512: 6a3b00c76d866ec2c9348f0274a4375a1321ec0042ba4d57a2e5e81735c30897d245de08d8e0cf050e706b935013e36e467558762d3a83d1d51535564954a0b4
ssdeep: 12288:q2k27S3/beL4RfwnpFYBSTSa4IZ+V7bBtd91rVigqq0WVxTqxUqs3LR:qg7SPbl9wpFYBEpINd91Zi83xOxG
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T12815AE4BA312C44CE64C9F7FC9F7DB152F90ADA68878CEC7A3487B79943B2682544342
sha3_384: 78ba35fe5680120bb20d557d93b17ca2474392475fe43b94a98fb60a3d3a9c9d705816c87d62d5e027422ddbeed22ebb
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2021-11-26 22:39:15

Version Info:
Translation: 0x0000 0x04b0
Comments: Rufus
CompanyName: Akeo Consulting
FileDescription: Rufus
FileVersion: 3.15.1812.0
InternalName: Xarmy v4.5.25.exe
LegalCopyright: Â© 2011-2021 Pete Batard (GPL v3)
LegalTrademarks: https://www.gnu.org/licenses/gpl-3.0.html
OriginalFilename: Xarmy v4.5.25.exe
ProductName: Rufus
ProductVersion: 3.15.1812.0
Assembly Version: 3.15.1812.0

IL:Trojan.MSILZilla.2628 also known as:

Lionic	Trojan.MSIL.Seraph.a!c
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.2628
FireEye	IL:Trojan.MSILZilla.2628
McAfee	Artemis!5ECB3A25E045
Alibaba	TrojanDownloader:MSIL/Seraph.b7d1d265
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Generik.HELDYTI
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Dropper.Generic-7113183-0
Kaspersky	HEUR:Trojan-Downloader.MSIL.Seraph.gen
BitDefender	IL:Trojan.MSILZilla.2628
Avast	Win64:TrojanX-gen [Trj]
Ad-Aware	IL:Trojan.MSILZilla.2628
Sophos	Mal/Generic-S
TrendMicro	Trojan.Win32.MSILZILLA.USMANKS21
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	IL:Trojan.MSILZilla.2628 (B)
Ikarus	Trojan.SuspectCRC
GData	IL:Trojan.MSILZilla.2628
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1143066
MAX	malware (ai score=83)
ViRobot	Trojan.Win32.Z.Agent.930816.CJ
Microsoft	Trojan:Win32/AgentTesla!ml
Cynet	Malicious (score: 100)
VBA32	TrojanDownloader.MSIL.Seraph
ALYac	IL:Trojan.MSILZilla.2628
Malwarebytes	Trojan.MCrypt.MSIL.Generic
TrendMicro-HouseCall	Trojan.Win32.MSILZILLA.USMANKS21
SentinelOne	Static AI – Suspicious PE
eGambit	Trojan.Generic
Fortinet	PossibleThreat
AVG	Win64:TrojanX-gen [Trj]
Panda	Trj/CI.A

How to remove IL:Trojan.MSILZilla.2628?

IL:Trojan.MSILZilla.2628 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X