Trojan

IL:Trojan.MSILZilla.5957 removal

Malware Removal

The IL:Trojan.MSILZilla.5957 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.5957 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Russian
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine IL:Trojan.MSILZilla.5957?


File Info:

crc32: 81D90680
md5: 4a627e7d9e3f0e0b621a3458384afcfd
name: 4A627E7D9E3F0E0B621A3458384AFCFD.mlw
sha1: f956c505d55284039c8cda846d948211e201dd26
sha256: dbca775a9d3f9a937180416f016db077ec3034b633f75acd7d9f67135e28b14d
sha512: 8034bf3ecac8126e53878c2733fe80136897f1d10ad808ebcc65b5e3ffacb0c9fc34896ed70a114e834dc7c71f8df9890ddfd4e4753bf25f164e2fc7f35d5fc1
ssdeep: 98304:dAI+iNtlu0GBAqzTFkfMNYuzQCmEv9LTBmKwXjjkA8Xc2GqGYBgZZUFzkHEfqO:+tMluP+vh6LTfwXfr8XcttZ4zVqO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Adobe
FileDescription: Antiactivator 10.0.0.221 Installation
FileVersion: 10.0.0.221
Comments:
CompanyName: Adobe
Translation: 0x0409 0x04e4

IL:Trojan.MSILZilla.5957 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0052f63e1 )
LionicTrojan.Win32.Generic.i!c
Elasticmalicious (high confidence)
DrWebTrojan.Nanocore.24
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Keygen
ALYacIL:Trojan.MSILZilla.5957
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan ( 0052f63e1 )
Cybereasonmalicious.d9e3f0
SymantecTrojan.Nancrat
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:RATX-gen [Trj]
KasperskyUDS:Trojan.MSIL.DOTHETUK.sb
BitDefenderIL:Trojan.MSILZilla.5957
NANO-AntivirusTrojan.Win32.Kryptik.fbsafn
MicroWorld-eScanIL:Trojan.MSILZilla.5957
SophosGeneric Reputation PUA (PUA)
McAfee-GW-EditionBehavesLike.Win32.Backdoor.tc
FireEyeGeneric.mg.4a627e7d9e3f0e0b
EmsisoftIL:Trojan.MSILZilla.5957 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1114864
Antiy-AVLTrojan/Generic.ASMalwS.2626525
KingsoftWin32.PSWTroj.Undef.(kcloud)
MicrosoftRansom:Win32/StopCrypt!ml
ArcabitIL:Trojan.MSILZilla.D1745
GDataIL:Trojan.MSILZilla.5957
McAfeeArtemis!4A627E7D9E3F
MAXmalware (ai score=98)
VBA32Trojan.Tiggre
PandaTrj/CI.A
YandexTrojan.Kryptik!SrVJpxJKoIE
IkarusTrojan.Win32.Cab
MaxSecureTrojan-Ransom.Win32.Crypmod.zfq
FortinetMSIL/Kryptik.NWA!tr
AVGWin32:RATX-gen [Trj]
Paloaltogeneric.ml

How to remove IL:Trojan.MSILZilla.5957?

IL:Trojan.MSILZilla.5957 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment