IL:Trojan.MSILZilla.36536 removal tips

The IL:Trojan.MSILZilla.36536 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.36536 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.36536?


File Info:
name: 0FFF5A43B4777EAFBB20.mlw
path: /opt/CAPEv2/storage/binaries/74d5bfb9bf96537e3c1c29e0ab81d9cfcb6525f4270f1037c5fd523f14e771ac
crc32: F725D937
md5: 0fff5a43b4777eafbb2064ecb9311125
sha1: 05bb56d09b73ae683b7431070ecd074e8e2ba6bb
sha256: 74d5bfb9bf96537e3c1c29e0ab81d9cfcb6525f4270f1037c5fd523f14e771ac
sha512: 41c573f265e0cbce918e65f47bc10be8ad8b67cdfff7c37700d6c6c1e0c15d7147c811d8aed2e40bbd7e809d7c53962866858a54f57df41891be26590a33b6ae
ssdeep: 6144:yXk7JyAA+PM5RHgVnXI7TAtORj5RHgVnII7TJtOVm:YkhRk5eVnXVO55eVnIYOE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T100E4E59BD903AD29C6D07C7D8F31D1B07794AD09AA50C39A15E2EE3B39EE913490FC16
sha3_384: 2d0cd5cd72b907c4a6bdd5dbab72c350d686422e45039fb4f673bc5304840fc666978ed3dc1838c89edfe3b892125a2b
ep_bytes: ff250020400000000000000000000000
timestamp: 2052-12-21 13:23:39

Version Info:
Translation: 0x0000 0x04b0
Comments: System recovery tool
CompanyName: Absolutly Not Company
FileDescription: ToxidChecker
FileVersion: 0.0.0.2
InternalName: ToxidChecker.exe
LegalCopyright: Copyright © 2022 ToxidWorm
LegalTrademarks: N/A
OriginalFilename: ToxidChecker.exe
ProductName: ToxidChecker
ProductVersion: 0.0.0.2
Assembly Version: 3.7.2.2

IL:Trojan.MSILZilla.36536 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.36536
FireEye	IL:Trojan.MSILZilla.36536
Skyhigh	BehavesLike.Win32.Generic.bm
McAfee	Artemis!0FFF5A43B477
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Trojan.Win32.Agent.V0ls
CrowdStrike	win/malicious_confidence_60% (W)
Arcabit	IL:Trojan.MSILZilla.D8EB8
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
BitDefender	IL:Trojan.MSILZilla.36536
Avast	Win32:MalwareX-gen [Trj]
Sophos	Generic Reputation PUA (PUA)
VIPRE	IL:Trojan.MSILZilla.36536
Emsisoft	IL:Trojan.MSILZilla.36536 (B)
Varist	W32/ABRisk.XXIT-9056
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Program:Win32/Wacapew.C!ml
GData	IL:Trojan.MSILZilla.36536
Google	Detected
VBA32	Downloader.MSIL.Pabin.Heur
ALYac	IL:Trojan.MSILZilla.36536
MAX	malware (ai score=81)
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H0CB924
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.186423316.susgen
Fortinet	PossibleThreat
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove IL:Trojan.MSILZilla.36536?

IL:Trojan.MSILZilla.36536 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X