IL:Trojan.MSILZilla.35797 removal tips

The IL:Trojan.MSILZilla.35797 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.35797 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine IL:Trojan.MSILZilla.35797?


File Info:
name: 2144B242C6E1949C50A0.mlw
path: /opt/CAPEv2/storage/binaries/52fa9c97684f5cc46732997f1b19e422eac91a4c6321257908f7da9f681dd1c0
crc32: 5004492E
md5: 2144b242c6e1949c50a0fc6f83db448b
sha1: 5bb3c8d8bf2cda8ffead336d2f0950345f15301f
sha256: 52fa9c97684f5cc46732997f1b19e422eac91a4c6321257908f7da9f681dd1c0
sha512: a799370269a37958b4165c982c082ff98678894a21c50b2616bd2f311a9a87dd81b097af27a44138e987b020551e3c9bb7c04ada3f4280981e9e5a8aa78b6903
ssdeep: 12288:b+bt68v+oqr/+BvjUvAmOtwaH7ARAYcXKqgms7m92xwYN6V/k8sOQ:CbtxnbawwaHfgRam8V87
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10CE5E629369CDE45F93D83310E51D0B95BF6AC0ADF22D61F7EA13B8E14F2A84491261F
sha3_384: 8e049550417e161cddcd1e67cbcb71c7f22958ee3248832dac33671b133a8665544172bcd883f9b0fac83d887f4ce0fd
ep_bytes: ff250020400000000000000000000000
timestamp: 2014-03-15 10:29:09

Version Info:
Translation: 0x0000 0x04b0
Comments: Mujun126@126.com
CompanyName: Romix Group
FileDescription: EOL
FileVersion: 20.13.03.26
InternalName: EOL.exe
LegalCopyright: Mujun126@126.com
LegalTrademarks: Romix Group
OriginalFilename: EOL.exe
ProductName: EOL
ProductVersion: 20.13.03.26
Assembly Version: 20.13.1.26

IL:Trojan.MSILZilla.35797 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	IL:Trojan.MSILZilla.35797
FireEye	IL:Trojan.MSILZilla.35797
Skyhigh	Artemis
McAfee	Artemis!2144B242C6E1
Malwarebytes	Generic.Malware/Suspicious
Arcabit	IL:Trojan.MSILZilla.D8BD5
VirIT	Trojan.Win32.MSIL_Heur.A
BitDefender	IL:Trojan.MSILZilla.35797
Emsisoft	IL:Trojan.MSILZilla.35797 (B)
VIPRE	IL:Trojan.MSILZilla.35797
Trapmine	malicious.high.ml.score
Varist	W32/ABRisk.WNPL-2521
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Win32.Agent
GData	IL:Trojan.MSILZilla.35797
Google	Detected
ALYac	IL:Trojan.MSILZilla.35797
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09AO24
Ikarus	Trojan.IL.MSILZilla
MaxSecure	Trojan.Malware.230732098.susgen
Fortinet	PossibleThreat
DeepInstinct	MALICIOUS

How to remove IL:Trojan.MSILZilla.35797?

IL:Trojan.MSILZilla.35797 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X