IL:Trojan.MSILZilla.5749 removal

The IL:Trojan.MSILZilla.5749 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.5749 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.5749?


File Info:
name: E8443046A24DEA02C81F.mlw
path: /opt/CAPEv2/storage/binaries/8a1037be1c296adaa891196e2771490ce6c7c682c8cb9cbe45d13bbd2f7d87c6
crc32: 68B0BE3D
md5: e8443046a24dea02c81ffd93bcee5a00
sha1: 7c5ef7301149a5f6412f720298a76cb2c087181b
sha256: 8a1037be1c296adaa891196e2771490ce6c7c682c8cb9cbe45d13bbd2f7d87c6
sha512: b94f91822b27494e2479eeb75dc63f4677a5d1435ec6f3a919870908fa80800ced4d7d2eb7bd62264e613fcc1cec52d04c0fe0bd8a6cf19c57ebe7b51bd1397e
ssdeep: 768:JHK3Y/0g4CD9P3TomhqQYyRzxhT+rRlhZZwMsm5svFAYlyH16w8YYIJyTI3oeUrw:Fp//o4ZgAJfnnUBm+NIA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BB23D59236A8BF26C97DA7F545B6180143F3750A0891EF5A9ED124CE2E32F409713F9B
sha3_384: 85caf44411b85e529d8eff5226ef303dfc88b61520068d9f7fd6bb807a23e1316f1e63e14da8fa133e4d7f248b867d8f
ep_bytes: ff250020400001000000020000000300
timestamp: 2039-03-31 23:00:13

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Dark Dashboard
FileVersion: 1.0.0.0
InternalName: Dark Dashboard.exe
LegalCopyright: Copyright ©  2019
LegalTrademarks: 
OriginalFilename: Dark Dashboard.exe
ProductName: Dark Dashboard
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.5749 also known as:

Cynet	Malicious (score: 99)
FireEye	IL:Trojan.MSILZilla.5749
ALYac	IL:Trojan.MSILZilla.5749
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	IL:Trojan.MSILZilla.5749
K7GW	Trojan-Downloader ( 00589c921 )
K7AntiVirus	Trojan-Downloader ( 00589c921 )
Symantec	MSIL.Downloader!gen7
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.JGP
APEX	Malicious
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
MicroWorld-eScan	IL:Trojan.MSILZilla.5749
Rising	Trojan.Generic/MSIL@AI.91 (RDM.MSIL:FaI/atGHgZO6oXfxA2/pVw)
Emsisoft	IL:Trojan.MSILZilla.5749 (B)
McAfee-GW-Edition	Artemis
Ikarus	Trojan-Downloader.MSIL.Agent
Avira	TR/Dldr.Agent.twomj
MAX	malware (ai score=80)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	HEUR:Backdoor.MSIL.Crysan.gen
GData	IL:Trojan.MSILZilla.5749
McAfee	Artemis!E8443046A24D
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R067H0CB222
SentinelOne	Static AI – Suspicious PE
Fortinet	MSIL/Agent.IVE!tr.dldr
BitDefenderTheta	Gen:NN.ZemsilF.34182.cm0@a4HVA5p
AVG	Win32:DropperX-gen [Drp]
Avast	Win32:DropperX-gen [Drp]

How to remove IL:Trojan.MSILZilla.5749?

IL:Trojan.MSILZilla.5749 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X