Trojan

IL:Trojan.MSILZilla.9797 removal guide

Malware Removal

The IL:Trojan.MSILZilla.9797 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.9797 virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid

How to determine IL:Trojan.MSILZilla.9797?


File Info:

name: 8ADCBF8ACA1835F0BE5D.mlw
path: /opt/CAPEv2/storage/binaries/b04617950f53bea2b6040344797a64a83f9d088f5b134fb9437b2e7c8d8ad524
crc32: 48650CED
md5: 8adcbf8aca1835f0be5d15441d09dab6
sha1: 482b41c3cb8eba4e388044cba6fae73cf07d7b2d
sha256: b04617950f53bea2b6040344797a64a83f9d088f5b134fb9437b2e7c8d8ad524
sha512: 7090ec85b5713b0f819eba3de644589abb5cc4f571a18d8eeaecdf7a8aaa6d049bb85b6fe1c7e925f25d07cc0a11feca9a5fb859cd877560cbd0a833b7aad205
ssdeep: 96:zulghwwBJE9hbBP1mmxf2UeSx3Wy4XvJkLmKLXItVBdFRPKy9yiLwlctovfymcO1:rGf2ZBf2LmKLXIPXnPKA/L2gov1XpvB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T185121A22636CC337CB760B3B5DA763502771E7559D66CAAE28CC051EAD733204B92B72
sha3_384: 724c0e1daed600017b7f9f81cd12abf624437c46a817334398da0e0bd57647dcde27fb5eb391f242e1db0b468bcf96a3
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-11-28 12:14:37

Version Info:

Translation: 0x0000 0x04b0
CompanyName: CtrlSoft
FileDescription: WindowsFormsApplication1
FileVersion: 1.0.0.0
InternalName: chrome.exe
LegalCopyright: Copyright © CtrlSoft 2018
OriginalFilename: chrome.exe
ProductName: WindowsFormsApplication1
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILZilla.9797 also known as:

LionicTrojan.MSIL.Small.8!c
DrWebTrojan.DownLoader27.17538
MicroWorld-eScanIL:Trojan.MSILZilla.9797
FireEyeIL:Trojan.MSILZilla.9797
McAfeeArtemis!8ADCBF8ACA18
MalwarebytesTrojan.Clicker
SangforTrojan.MSIL.Small.dw
K7AntiVirusTrojan ( 005726c21 )
AlibabaTrojanClicker:MSIL/TScope.1db1d183
K7GWTrojan ( 005726c21 )
Cybereasonmalicious.aca183
BitDefenderThetaGen:NN.ZemsilF.34606.am0@aK2k1Lj
VirITTrojan.Win32.Dnldr27.ZYO
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32a variant of MSIL/TrojanClicker.Tiny.P
Paloaltogeneric.ml
KasperskyTrojan-Clicker.MSIL.Small.dw
BitDefenderIL:Trojan.MSILZilla.9797
NANO-AntivirusTrojan.Win32.Johnnie.fkrscx
AvastWin32:Trojan-gen
Ad-AwareIL:Trojan.MSILZilla.9797
EmsisoftIL:Trojan.MSILZilla.9797 (B)
ComodoMalware@#27a5nuancd0pz
F-SecureTrojan.TR/Clicker.ichkp
ZillyaTrojan.Tiny.Win32.6042
McAfee-GW-EditionArtemis!Trojan
SentinelOneStatic AI – Suspicious PE
IkarusTrojan.MSIL.TrojanClicker
JiangminTrojanClicker.MSIL.koq
AviraTR/Clicker.ichkp
Antiy-AVLTrojan/Generic.ASMalwS.29A3D9F
MicrosoftTrojan:Win32/Occamy.CB0
GDataIL:Trojan.MSILZilla.9797
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Small.C3290738
VBA32TScope.Trojan.MSIL
ALYacIL:Trojan.MSILZilla.9797
CylanceUnsafe
TencentMsil.Trojan.Small.Eehw
YandexTrojan.CL.Small!H90hpfyucHY
FortinetMSIL/Generic.AP.233A3E!tr
AVGWin32:Trojan-gen
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)

How to remove IL:Trojan.MSILZilla.9797?

IL:Trojan.MSILZilla.9797 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment