Trojan

About “Trojan.Win32.Vilsel.csjl” infection

Malware Removal

The Trojan.Win32.Vilsel.csjl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Vilsel.csjl virus can do?

  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Creates a copy of itself
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Vilsel.csjl?


File Info:

name: 1B98A28A0F87C26B36E3.mlw
path: /opt/CAPEv2/storage/binaries/86f03601dadb0ce2f50a72645663aebac290e681bb70c4e25b7c37b596f81510
crc32: 4A86E3B0
md5: 1b98a28a0f87c26b36e3c4d336bbe636
sha1: 05d58818d45476abad07cdacd39a7999fde3dd82
sha256: 86f03601dadb0ce2f50a72645663aebac290e681bb70c4e25b7c37b596f81510
sha512: c3ad8aa1567efe39619293db33df34299370ec170136f3f5a0bd669cc351c3520cbd8a25b75672e0af91be7f55046831e4605b689ebf7b002338efb4eb79b9ed
ssdeep: 1536:uuQRyle0Y9WV32pum2BHyPuWU0ucXDveteBM2mlmo7cd5QMK:FQMle0wQ32gVHyPuWUpcS4ld5QMK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E2F36B57F68220F2C829037214C7977BDA7ABE34522F7549A7913F1ACD3A261BB0D187
sha3_384: b5a86c4fa424f657cebcc5b61cf3d57617503daeaf1933ec78dd8ee6d1b1da936ed3a86844ff0df6340451be6fb70581
ep_bytes: 55b878160000575653e807280000c744
timestamp: 2007-01-22 21:51:22

Version Info:

0: [No Data]

Trojan.Win32.Vilsel.csjl also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Vilsel.tsof
Elasticmalicious (moderate confidence)
MicroWorld-eScanDropped:Generic.Malware.SF.231B4057
FireEyeGeneric.mg.1b98a28a0f87c26b
CAT-QuickHealDownloader.Agent.27044
SkyhighBehavesLike.Win32.Generic.cz
ALYacDropped:Generic.Malware.SF.231B4057
MalwarebytesGeneric.Malware.AI.DDS
VIPREDropped:Generic.Malware.SF.231B4057
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005983e51 )
BitDefenderDropped:Generic.Malware.SF.231B4057
K7GWTrojan ( 005983e51 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZexaF.36792.kmW@ainJwOp
SymantecTrojan Horse
ESET-NOD32Win32/TrojanDownloader.Agent.NIV
APEXMalicious
ClamAVWin.Downloader.2666-1
KasperskyTrojan.Win32.Vilsel.csjl
AlibabaTrojan:Win32/Vilsel.9a15
NANO-AntivirusTrojan.Win32.Agent.yvpm
ViRobotTrojan.Win32.A.Downloader.84496.A
RisingDownloader.Agent!8.B23 (TFE:2:Bb8arfHsHCG)
EmsisoftDropped:Generic.Malware.SF.231B4057 (B)
BaiduWin32.Trojan-Downloader.Agent.gr
F-SecureTrojan.TR/Downloader.Gen
DrWebTrojan.DownLoader.20145
ZillyaTrojan.Vilsel.Win32.41902
TrendMicroTROJ_GEN.R002C0DJ123
Trapminemalicious.high.ml.score
SophosMal/Agent-B
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=81)
JiangminTrojanDownloader.Agent.ghz
WebrootW32.Downloader.Gen
GoogleDetected
AviraTR/Downloader.Gen
VaristW32/Busky.B.gen!Eldorado
Antiy-AVLTrojan[Downloader]/Win32.Agent
Kingsoftmalware.kb.a.1000
MicrosoftTrojanDownloader:Win32/Agent
ArcabitGeneric.Malware.SF.231B4057
ZoneAlarmTrojan.Win32.Vilsel.csjl
GDataDropped:Generic.Malware.SF.231B4057
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.RL_Vilsel.R361066
Acronissuspicious
McAfeeGenericRXCG-HN!1B98A28A0F87
DeepInstinctMALICIOUS
VBA32BScope.Trojan.Pincav
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DJ123
TencentTrojan.Win32.Vilsel.xaa
YandexTrojan.GenAsa!MRZMWXCR44k
IkarusTrojan-Downloader.Win32.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.APD!tr.dldr
AVGWin32:Agent-JML [Trj]
Cybereasonmalicious.8d4547
AvastWin32:Agent-JML [Trj]

How to remove Trojan.Win32.Vilsel.csjl?

Trojan.Win32.Vilsel.csjl removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment