Trojan

What is “IL:Trojan.MSILZilla.40526”?

Malware Removal

The IL:Trojan.MSILZilla.40526 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.40526 virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • CAPE detected the RedLine malware family
  • Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.40526?


File Info:

name: 6F3DD64999BF4B9F682D.mlw
path: /opt/CAPEv2/storage/binaries/fb6c1116eb6fb4d0485b4c6a2b381332ccb511bc6d745ebe02e6b3d2e880719b
crc32: C7F6492A
md5: 6f3dd64999bf4b9f682d18654cb1ebe3
sha1: 9389f7025bc497122b4a916e2f8058b12377bdf6
sha256: fb6c1116eb6fb4d0485b4c6a2b381332ccb511bc6d745ebe02e6b3d2e880719b
sha512: 0ec8013c36e497bc74f8bdec28c3f008dad1287dfb65517e4a1d8f1467c9fb6e8ad56ae25c21fde3da9a92ed829a362ec365fb3995d4896eff1d5ffc91753fbd
ssdeep: 1536:9qs+XqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed263tmulgS6pY:r0gzWHY3+zi0ZbYe1g0ujyzdgY
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1A9A35D3067AC9F19EAFD1B74B4B2012043F0E48A9091FB4A4DC154E61FA7B866917EF2
sha3_384: 60fd53fcaed1197489b763bb1c9bc9c5318a1839d700d78498fed54f3a1f880a33f7f522c8c2734af72cbe31b76ea435
ep_bytes: ff250020400000000000000000000000
timestamp: 2097-08-14 23:34:58

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: Implosions.exe
LegalCopyright:
OriginalFilename: Implosions.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

IL:Trojan.MSILZilla.40526 also known as:

BkavW32.YopeaJonD.Trojan
LionicTrojan.Win32.RedLine.i!c
ElasticWindows.Trojan.RedLineStealer
MicroWorld-eScanIL:Trojan.MSILZilla.40526
CAT-QuickHealTrojan.MsilFC.S24736542
SkyhighBehavesLike.Win32.Generic.nm
ALYacIL:Trojan.MSILZilla.40526
MalwarebytesRedlineStealer.Spyware.Stealer.DDS
ZillyaTrojan.Agent.Win32.2443295
SangforSuspicious.Win32.Save.a
K7AntiVirusSpyware ( 0057a2d41 )
AlibabaTrojanPSW:MSIL/RedLine.01183c19
K7GWSpyware ( 0057a2d41 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZemsilF.36680.fm0@a0eAD!c
VirITTrojan.Win32.Genus.PAW
SymantecTrojan Horse
tehtrisGeneric.Malware
ESET-NOD32a variant of MSIL/Spy.RedLine.A
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-PSW.MSIL.Reline.gen
BitDefenderIL:Trojan.MSILZilla.40526
NANO-AntivirusTrojan.Win32.Reline.kbmsrg
SUPERAntiSpywareTrojan.Agent/Gen-Crypt
AvastWin32:MalwareX-gen [Trj]
TencentTrojan-PSW.MSIL.Reline.ha
EmsisoftTrojan-Spy.Agent (A)
F-SecureHeuristic.HEUR/AGEN.1305503
DrWebTrojan.PWS.Stealer.32288
VIPREIL:Trojan.MSILZilla.40526
TrendMicroTrojanSpy.MSIL.REDLINE.SMYXDILZ
SophosMal/Reline-B
IkarusTrojan-Spy.MSIL.Redline
JiangminTrojan.PSW.MSIL.cihh
VaristW32/MSIL_Agent.BJO.gen!Eldorado
AviraHEUR/AGEN.1305503
Antiy-AVLTrojan[Spy]/MSIL.Agent
KingsoftMSIL.Trojan-PSW.Reline.gen
ArcabitIL:Trojan.MSILZilla.D9E4E
ZoneAlarmHEUR:Trojan-PSW.MSIL.Reline.gen
GDataMSIL.Trojan-Stealer.Redline.B
GoogleDetected
AhnLab-V3Infostealer/Win.RedLine.C4566112
McAfeeGenericRXPZ-SW!6F3DD64999BF
TACHYONTrojan-PWS/W32.DN-Reline.97792.L
VBA32Trojan.MSIL.RedLine.Heur
Cylanceunsafe
PandaTrj/CI.A
ZonerTrojan.Win32.139086
RisingBackdoor.SectopRAT!1.DA27 (CLASSIC)
YandexTrojanSpy.Agent!7Cx7tWcWRFw
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.95853585.susgen
FortinetMSIL/Agent.DFY!tr.spy
AVGWin32:MalwareX-gen [Trj]
DeepInstinctMALICIOUS

How to remove IL:Trojan.MSILZilla.40526?

IL:Trojan.MSILZilla.40526 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment