Trojan.WebShell.MSIL information

The Trojan.WebShell.MSIL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.WebShell.MSIL virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Trojan.WebShell.MSIL?


File Info:
name: B0080B1F028275F37E1F.mlw
path: /opt/CAPEv2/storage/binaries/2c48f1eeee7dbfa4a0ff55e2507ad1fb8975f1fc4b9dd6370e3aab6aabbe398d
crc32: C2FAA735
md5: b0080b1f028275f37e1f6a61bbbe4cb3
sha1: 9036d20a7b97790e4b7c2a92fcb537faa33e999d
sha256: 2c48f1eeee7dbfa4a0ff55e2507ad1fb8975f1fc4b9dd6370e3aab6aabbe398d
sha512: b09f4b000ab299906551301f20f40da66a86ada24da729dcfb321d808cd1350cadf02547a6d9af34c5cbf552d919967707a158e5b7923f42386a4f605e2f05af
ssdeep: 384:Z8drBF0cT5N3xc3kBogszC9vMqwJsttexOtKX:cHoNUvMqwJo4xOtK
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1CD62F81BAA65CE23C9BB673DAB329904C3BAA5174616CB1ABCDC609C0FF37141151FC6
sha3_384: 874dfc54132d54669316f7c076e5f843908874a693ecf8d226b3dcc2f28da547006573edc251450fa619731e7c2d46cd
ep_bytes: ff250020001000000000000000000000
timestamp: 2024-03-22 20:23:24

Version Info:
0: [No Data]

Trojan.WebShell.MSIL also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILHeracles.61452
Malwarebytes	Trojan.WebShell.MSIL
VIPRE	Gen:Variant.MSILHeracles.61452
K7AntiVirus	Trojan ( 005b19ee1 )
K7GW	Trojan ( 005b19ee1 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Webshell.EV
TrendMicro-HouseCall	TROJ_GEN.R011C0DCO24
ClamAV	Win.Packed.Webshell-10016062-0
Kaspersky	HEUR:Backdoor.MSIL.WebShell.gen
BitDefender	Gen:Variant.MSILHeracles.61452
Avast	Win32:BackdoorX-gen [Trj]
Tencent	Backdoor.MSIL.WebShell.ho
Emsisoft	Gen:Variant.MSILHeracles.61452 (B)
Google	Detected
F-Secure	Trojan.TR/Dropper.MSIL.Gen
DrWeb	BackDoor.WebshellNET.9
Zillya	Trojan.Webshell.Win32.16666
TrendMicro	TROJ_GEN.R011C0DCO24
FireEye	Gen:Variant.MSILHeracles.61452
Ikarus	Trojan.MSIL.Webshell
Varist	W32/WebShell.E.gen!Eldorado
Avira	TR/Dropper.MSIL.Gen
Microsoft	Backdoor:MSIL/Webshell.BB!MTB
Arcabit	Trojan.MSILHeracles.DF00C
ZoneAlarm	HEUR:Backdoor.MSIL.WebShell.gen
GData	MSIL.Trojan.PSE.18J0OUJ
AhnLab-V3	Backdoor/Win.BackDoor.C5557957
ALYac	Gen:Variant.MSILHeracles.61452
MAX	malware (ai score=80)
Panda	Trj/GdSda.A
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Webshell.EE!tr
AVG	Win32:BackdoorX-gen [Trj]

How to remove Trojan.WebShell.MSIL?

Trojan.WebShell.MSIL removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X