About “IL:Trojan.MSILZilla.8300” infection

The IL:Trojan.MSILZilla.8300 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.8300 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Installs itself for autorun at Windows startup
• Creates a copy of itself
• Unusual version info supplied for binary

How to determine IL:Trojan.MSILZilla.8300?

File Info:
name: C3D65D73CD6894FDAD3F.mlw
path: /opt/CAPEv2/storage/binaries/1b36599fe98c0fa9a417d4c8527eb3b2a6b83c39e79096c3ba7cca258e986f94
crc32: 1067B224
md5: c3d65d73cd6894fdad3fc281b976fd8b
sha1: e8a8784142c83001a95aeedec4510fc9c8facf2f
sha256: 1b36599fe98c0fa9a417d4c8527eb3b2a6b83c39e79096c3ba7cca258e986f94
sha512: cde75d0f25a98bd562cccbc4fa74db3579bb21c0815019277f9b5c7f1304b6d4ee59962f59b7591b4da897b8f6e7fe2a4d4d3fa4714cc92ed5ee21a84702323b
ssdeep: 384:M0Lo5UvDh5KGz4onaMsFrzvbSy9klduL:Vs5UL6zIdI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17C62F74077EC8731DEFE0BBE58621114833EE296F877DE1E5A98524D5D233608A60F63
sha3_384: 1290360c77cce7995bcae046650a367ba9c5039f22a9b0c5dc742a87e3fee370c18a0a22daea89f77f33c261f843eab7
ep_bytes: ff250020400000000000000000000000
timestamp: 2015-10-05 17:59:29

Version Info:
Translation: 0x0000 0x04b0
CompanyName: intel(R)
FileDescription: USB Drives Support
FileVersion: 1.0.0.0
InternalName: udriver.exe
LegalCopyright: USB Drives Support Copyright © Microsoft 2015
OriginalFilename: udriver.exe
ProductName: intel(R)
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.8300 also known as:

How to remove IL:Trojan.MSILZilla.8300?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.