IL:Trojan.MSILZilla.5832 information

The IL:Trojan.MSILZilla.5832 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.5832 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine IL:Trojan.MSILZilla.5832?


File Info:
name: BF9C007417844930B0D4.mlw
path: /opt/CAPEv2/storage/binaries/bdad0767d8fb944f3d9fb6d14bd9fc81b38caeadb1dda2a3f6ebfc4fffc765e6
crc32: 55AEA20C
md5: bf9c007417844930b0d4a0cc4dab1302
sha1: 91210f874bd157e4edf91bb0480f83f7b062290b
sha256: bdad0767d8fb944f3d9fb6d14bd9fc81b38caeadb1dda2a3f6ebfc4fffc765e6
sha512: 9c090e4b177ec184bccf8819280c916c4296ba09ceafaaa1a11245594ab52738bd9b48978880c6b69393d5f64cc03e331156c3ef5acd798be89873c502f2bea9
ssdeep: 48:69MNJ8O0fJV1z0LzIdv/0f8KqjBmmLpmcqORQVEhtEOPuly0MNI:IFxV14LTf8JBpFqhask0M
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14D91721693E85177E0BA4B354AB30B0923B4F9759F77875F29E4202EACA27540D22BF0
sha3_384: 5abd4e22992f4170e654ae4d532b7eed97be5fd8ceffe76e65cc3eb9c067499f8ebfca62228d3b1c3da8ab71139845b5
ep_bytes: ff250020400000000000000000000000
timestamp: 1970-01-01 00:00:00

Version Info:
Translation: 0x007f 0x04b0
Comments:  
CompanyName:  
FileDescription:  
FileVersion: 0.0.0.0
InternalName: test1
LegalCopyright:  
LegalTrademarks:  
OriginalFilename: test1.exe
ProductName:  
ProductVersion:

IL:Trojan.MSILZilla.5832 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.5832
FireEye	Generic.mg.bf9c007417844930
McAfee	Trojan-Veil-FLRH!BF9C00741784
Cylance	unsafe
Zillya	Downloader.Tiny.Win32.14157
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36196.am0@aWm4aml
VirIT	Backdoor.Win32.Meterpreter.BG
Cyren	W32/MSIL_Troj.BMR.gen!Eldorado
Symantec	Backdoor.Veilev
ESET-NOD32	a variant of MSIL/TrojanDownloader.Tiny.BQ
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	IL:Trojan.MSILZilla.5832
NANO-Antivirus	Trojan.Win32.TrjGen.dbjaze
Avast	Win32:Evo-gen [Trj]
Tencent	Win32.Trojan.Generic.Qsmw
Sophos	ATK/Dloadr-EFR
F-Secure	Trojan.TR/Crypt.XPACK.Gen7
DrWeb	BackDoor.Meterpreter.32
VIPRE	IL:Trojan.MSILZilla.5832
TrendMicro	Backdoor.MSIL.TINY.SMA
McAfee-GW-Edition	Trojan-Veil-FLRH!BF9C00741784
Trapmine	malicious.moderate.ml.score
Emsisoft	IL:Trojan.MSILZilla.5832 (B)
SentinelOne	Static AI – Malicious PE
GData	IL:Trojan.MSILZilla.5832
Google	Detected
Avira	TR/Crypt.XPACK.Gen7
Xcitium	TrojWare.MSIL.TrojanDownloader.Small.H@6lg8ek
Arcabit	IL:Trojan.MSILZilla.D16C8
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Leivion.E
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	IL:Trojan.MSILZilla.5832
MAX	malware (ai score=85)
TrendMicro-HouseCall	Backdoor.MSIL.TINY.SMA
Rising	Downloader.Tiny!8.245 (CLOUD)
Ikarus	Trojan-Downloader.MSIL.Tiny
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	MSIL/Tiny.BQ!tr.dldr
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.74bd15
DeepInstinct	MALICIOUS

How to remove IL:Trojan.MSILZilla.5832?

IL:Trojan.MSILZilla.5832 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X