IL:Trojan.MSILZilla.5121 (B) removal

The IL:Trojan.MSILZilla.5121 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.5121 (B) virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.5121 (B)?


File Info:
name: A6E282C25DFDBA76C1F1.mlw
path: /opt/CAPEv2/storage/binaries/7db4238a01bbfbecdccb3783c0513f553bfe3ff80c337cc7076d2afe928fa435
crc32: 8CD144DC
md5: a6e282c25dfdba76c1f1b522fc9a8d63
sha1: ad3c3b6d6d40d40cb34a121b0468b8898e0ebfc3
sha256: 7db4238a01bbfbecdccb3783c0513f553bfe3ff80c337cc7076d2afe928fa435
sha512: 3afd3df173413df9e96ca7a1e2a4a14a1c4b581ae6e781ca81c42bfa1b732aa07cadc5b6e125c89c49fd1f7dccf0c29025aac2d0b1f671451db64e9aedc3f2d7
ssdeep: 96:n7ACsMwHxs/ouJi6xOBC2rcCMaYVsYPkzNt:MCsXxsQuJi8bLRaYVsoO
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1FAC1C705F3E8863BCDB50634BC6283800AB0BB55CD77CF9E6DC4664F6E572068523B50
sha3_384: 7ab18e5f33b48046c86762b36298c40f2c9b6d033c6bd0307b51612ecbb755fbd70b88e1be78cde84fc46e77a00a09a8
ep_bytes: ff250020400000000000000000000000
timestamp: 2092-11-19 15:35:02

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: shell
FileVersion: 1.0.0.0
InternalName: shell.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: shell.exe
ProductName: shell
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.5121 (B) also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
FireEye	Generic.mg.a6e282c25dfdba76
Cyren	W32/MSIL_Agent.DIO.gen!Eldorado
ESET-NOD32	a variant of MSIL/Evilnum.A
APEX	Malicious
Kaspersky	HEUR:Trojan-Ransom.MSIL.Blocker.gen
BitDefender	IL:Trojan.MSILZilla.5121
MicroWorld-eScan	IL:Trojan.MSILZilla.5121
Avast	Win32:BackdoorX-gen [Trj]
Ad-Aware	IL:Trojan.MSILZilla.5121
Emsisoft	IL:Trojan.MSILZilla.5121 (B)
DrWeb	BackDoor.RShell.166
VIPRE	IL:Trojan.MSILZilla.5121
Sophos	Troj/MSIL-SOZ
SentinelOne	Static AI – Suspicious PE
GData	MSIL.Malware.EvilNum.A
Avira	HEUR/AGEN.1240927
Arcabit	IL:Trojan.MSILZilla.D1401
ZoneAlarm	HEUR:Backdoor.MSIL.Small.gen
Microsoft	VirTool:MSIL/Mousewe.A!MTB
Google	Detected
ALYac	IL:Trojan.MSILZilla.5121
MAX	malware (ai score=87)
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:+J4zTFFGzn7GKimq4mn8bw)
Ikarus	Trojan.MSIL.Evilnum
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZemsilF.34606.am0@aa12ZFf
AVG	Win32:BackdoorX-gen [Trj]
Cybereason	malicious.25dfdb

How to remove IL:Trojan.MSILZilla.5121 (B)?

IL:Trojan.MSILZilla.5121 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X