Categories: Trojan

IL:Trojan.MSILZilla.6674 removal

The IL:Trojan.MSILZilla.6674 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.6674 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the CoinMiner04 malware family

How to determine IL:Trojan.MSILZilla.6674?


File Info:
name: 0524B5F5540E3D432AB0.mlwpath: /opt/CAPEv2/storage/binaries/7fb4bf8be9d146c0d6c200eb6bb1bd5869c6b4e031f154bb1cfc14fe01ffdc9dcrc32: 46712D50md5: 0524b5f5540e3d432ab09b87f203dc0csha1: d5d8f5bcf3fb807396dbbc35ba33d691ce83e83fsha256: 7fb4bf8be9d146c0d6c200eb6bb1bd5869c6b4e031f154bb1cfc14fe01ffdc9dsha512: 44abde7871104bf948cd202ed2871e6005783151108c3f96470573e8003c99a996d2f0f781d6ea7594aa577bf3225dac7299c96ba5abf2799e5d2a3893b18ce5ssdeep: 49152:UPtmnEDiOkIwU/b/WvDFSv5ZeBsYnkChayd6C0loMnjX2oKolhBKYn/:UPwED1kQuS6BsYk6dL3volTKU/type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T140B52352B5D000B0D5B20D394AF6A6756E3E7C205F74AB6B97C87D3D5E30280A329FA7sha3_384: 0136d5035d23d476073d01b66200215f730a7674b4b678c08edf1fccf72d87d75d6c16ed7e1c6fe85427c32cbba1f1c4ep_bytes: e8f2040000e98efeffff3b0dc8034300timestamp: 2019-09-09 10:13:09
Version Info:
0: [No Data]

IL:Trojan.MSILZilla.6674 also known as:

Lionic	Riskware.Win32.BitMiner.1!c
DrWeb	Trojan.Siggen11.49734
MicroWorld-eScan	IL:Trojan.MSILZilla.6674
FireEye	Generic.mg.0524b5f5540e3d43
McAfee	Artemis!0524B5F5540E
Cylance	Unsafe
Zillya	Dropper.Mine.Win32.148
Sangfor	Trojan.Win32.Generik.MBDSUGV
Alibaba	Trojan:Win32/CoinMiner.ali1002002
Cybereason	malicious.5540e3
Symantec	PUA.Gen.2
ESET-NOD32	a variant of Generik.MBDSUGV
TrendMicro-HouseCall	TROJ_GEN.R002H0CB622
Paloalto	generic.ml
Kaspersky	UDS:Trojan-Dropper.MSIL.Generic
BitDefender	IL:Trojan.MSILZilla.6674
Avast	Win32:Miner-DM [Trj]
Emsisoft	Trojan.CoinMiner (A)
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.AdwareLinkury.vc
Sophos	Mal/Generic-S
GData	IL:Trojan.MSILZilla.6674
Avira	TR/Agent.zvdgb
Gridinsoft	Ransom.Win32.Miner.sa
Arcabit	IL:Trojan.MSILZilla.D1A12
ZoneAlarm	not-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
VBA32	Trojan.Wacatac
ALYac	IL:Trojan.MSILZilla.6674
MAX	malware (ai score=88)
APEX	Malicious
Yandex	Trojan.Igent.bUS01M.22
SentinelOne	Static AI – Malicious PE
Fortinet	PossibleThreat.ARN.M
AVG	Win32:Miner-DM [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.11234915.susgen