Trojan

IL:Trojan.MSILZilla.7608 removal

Malware Removal

The IL:Trojan.MSILZilla.7608 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.7608 virus can do?

  • Creates RWX memory
  • Drops a binary and executes it
  • Sniffs keystrokes
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself

How to determine IL:Trojan.MSILZilla.7608?


File Info:

crc32: 99B8AD7A
md5: 0a9679087e5c5188f3bbd9ed0d8324f4
name: 0A9679087E5C5188F3BBD9ED0D8324F4.mlw
sha1: 8b4f6c592cd3d62242325e3defa58ad1bcd8b294
sha256: 843743cf2105ffdbb5834a68e4b9343d2d1bcc87fa8b3e01695d1143134c4863
sha512: d09cd85887649eb7158f92aeafe8f2915700c8433408edf3893a4fab13b3f10fd1de8234695f09ef0445eb4e3e0a81ed82d1307f77dc3fd0a60bc96bb05ee658
ssdeep: 768:o1CE2SCRz8roIKLTfq5fbdkxfgssbpLriQurd:oFCV8cdfqbdkEpLrCd
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: svchost.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: svchost.exe

IL:Trojan.MSILZilla.7608 also known as:

K7AntiVirusSpyware ( 004b8d6f1 )
LionicTrojan.MSIL.Agent.l!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen4.28387
CynetMalicious (score: 100)
ALYacIL:Trojan.MSILZilla.7608
CylanceUnsafe
ZillyaTrojan.Agent.Win32.342363
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/StupidStealth.3c3f9439
K7GWSpyware ( 004b8d6f1 )
Cybereasonmalicious.87e5c5
CyrenW32/Ursu.CM.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Spy.Agent.BP
APEXMalicious
AvastMSIL:KeyLogger-AB [Spy]
ClamAVWin.Packed.Zbot-8176461-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderIL:Trojan.MSILZilla.7608
NANO-AntivirusTrojan.Win32.Win32.dcdfto
MicroWorld-eScanIL:Trojan.MSILZilla.7608
TencentMsil.Trojan-spy.Agent.Hfi
Ad-AwareIL:Trojan.MSILZilla.7608
SophosMal/Generic-S
ComodoMalware@#uajxuifr3jg4
BitDefenderThetaGen:NN.ZemsilF.34294.bm0@a8a!GHd
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PKK21
McAfee-GW-EditionBehavesLike.Win32.Generic.mm
FireEyeGeneric.mg.0a9679087e5c5188
EmsisoftIL:Trojan.MSILZilla.7608 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanSpy.MSIL.aba
WebrootW32.Malware.MSIL.BA
AviraTR/Spy.Gen
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.F2E657
MicrosoftBackdoor:Win32/Bladabindi!ml
GDataIL:Trojan.MSILZilla.7608
TACHYONTrojan-Spy/W32.DN-Agent.29184.D
McAfeeGenericRXOZ-HN!0A9679087E5C
MAXmalware (ai score=100)
VBA32CIL.StupidStealth.Heur
PandaGeneric Malware
TrendMicro-HouseCallTROJ_GEN.R002C0PKK21
RisingSpyware.KeyLogger!1.647D (CLASSIC)
YandexTrojan.Agent!XiJ+FsvUSfs
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.1800760.susgen
FortinetW32/Agent.DDK!tr
AVGMSIL:KeyLogger-AB [Spy]
Paloaltogeneric.ml

How to remove IL:Trojan.MSILZilla.7608?

IL:Trojan.MSILZilla.7608 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment