Trojan

About “IL:Trojan.MSILZilla.27280” infection

Malware Removal

The IL:Trojan.MSILZilla.27280 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What IL:Trojan.MSILZilla.27280 virus can do?

  • Authenticode signature is invalid

How to determine IL:Trojan.MSILZilla.27280?



File Info:

name: 3235A3F4DCA75110A8F6.mlw
path: /opt/CAPEv2/storage/binaries/ee97d9bec755ced951f1e3296c543b3268f8dc8bed70a0007b3a6df4a1fd81f7
crc32: AEADD6B4
md5: 3235a3f4dca75110a8f6f6bd422e51c3
sha1: 568c989ae46455f67873ef27c91475ea228ea9d4
sha256: ee97d9bec755ced951f1e3296c543b3268f8dc8bed70a0007b3a6df4a1fd81f7
sha512: b4e22a3abfc27b49128ac366ef3550a84bf5d8d7db528213cfe8116ef0bdcc9e47c651bf949c6c301c2df582c1eaee3f678c1ca4e1c2896655dc25946e18632b
ssdeep: 768:+rA92zocMUpu3Gn74WVLXzvj9upGA/9V9fpD5oCM5t3AdCMbloU+L:Epu3CsYLooA/9V9RuC03AdCSCP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15C037C4C738DDAAAD8AE44BD15F241F0673442934252F3062CDBFADA9A677EC4B045E3
sha3_384: e7f6fdf78bf3d80e85ba0219547af6614fae02f844fd444ad4007c75efa0418400e1f1b32245479550994f0e54f0262c
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-05-25 12:21:10


Version Info:

Translation: 0x0000 0x04b0
CompanyName: RuntimeBroker
FileDescription: Runtime Broker
FileVersion: 1.0.0.0
InternalName: RuntimeBroker.exe
LegalCopyright:  
OriginalFilename: RuntimeBroker.exe
ProductName: RuntimeBroker
ProductVersion: 1.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.27280 also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Bobik.l!c
Elasticmalicious (moderate confidence)
MicroWorld-eScanIL:Trojan.MSILZilla.27280
FireEyeGeneric.mg.3235a3f4dca75110
SkyhighGenericRXHY-YA!3235A3F4DCA7
McAfeeGenericRXHY-YA!3235A3F4DCA7
MalwarebytesGeneric.Malware/Suspicious
ZillyaTrojan.Bobik.Win32.3931
SangforSpyware.Msil.Bobik.Vb53
K7AntiVirusTrojan ( 004d94d21 )
AlibabaTrojanSpy:MSIL/Bobik.c1219004
K7GWTrojan ( 004d94d21 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitIL:Trojan.MSILZilla.D6A90
VirITTrojan.Win32.MSIL_Heur.A
SymantecTrojan Horse
ESET-NOD32a variant of MSIL/Small.HB
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Spy.MSIL.Bobik.gen
BitDefenderIL:Trojan.MSILZilla.27280
SUPERAntiSpywareTrojan.Agent/Gen-Crypt
AvastWin32:SpywareX-gen [Trj]
TencentMalware.Win32.Gencirc.13b52169
EmsisoftIL:Trojan.MSILZilla.27280 (B)
DrWebBackDoor.SpyBotNET.49
VIPREIL:Trojan.MSILZilla.27280
TrendMicroTROJ_GEN.R049C0PEU22
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.MSIL.clsa
WebrootW32.Trojan.Gen
GoogleDetected
Antiy-AVLTrojan[Spy]/MSIL.Bobik
KingsoftWin32.Troj.Undef.a
MicrosoftTrojan:MSIL/WizzMonetize.LML!MTB
ViRobotTrojan.Win32.Z.Wacatac.37888.C
ZoneAlarmHEUR:Trojan-Spy.MSIL.Bobik.gen
GDataIL:Trojan.MSILZilla.27280
VaristW32/MSIL_Kryptik.ITS.gen!Eldorado
AhnLab-V3Trojan/Win.Bobik.C5134473
ALYacTrojan.MSIL.Bobik
MAXmalware (ai score=100)
Cylanceunsafe
PandaTrj/Chgt.AA
TrendMicro-HouseCallTROJ_GEN.R049C0PEU22
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.74169853.susgen
FortinetPossibleThreat
AVGWin32:SpywareX-gen [Trj]
DeepInstinctMALICIOUS

How to remove IL:Trojan.MSILZilla.27280?

IL:Trojan.MSILZilla.27280 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment