Trojan

About “Trojan:MSIL/Disstl.ABZ!MTB” infection

Malware Removal

The Trojan:MSIL/Disstl.ABZ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:MSIL/Disstl.ABZ!MTB virus can do?

  • Dynamic (imported) function loading detected
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • CAPE detected the StormKitty malware family

How to determine Trojan:MSIL/Disstl.ABZ!MTB?


File Info:

name: 0F620D6BDBF2A32D63F4.mlw
path: /opt/CAPEv2/storage/binaries/25fdd9973866343ec11dae712ebd8fb37048bbcf55cbfff9724d8b78b0ef9390
crc32: 5D68BF25
md5: 0f620d6bdbf2a32d63f45d17e3b7b966
sha1: 70649a53898e641ac94c70913fa16d1e9517f821
sha256: 25fdd9973866343ec11dae712ebd8fb37048bbcf55cbfff9724d8b78b0ef9390
sha512: 2b6c7bcc9ec289faeaadaf7a2986afc357106503e190637e8719b282f4bc7e06d1b357bfbd6b921fb56f3a0d83d966433163f20a428af5595399e15880a91223
ssdeep: 24576:o0RNXaV9x4IUgs36BUI2So5+jnzFoCaGApu8:ou0T+Sk6BU7HIFo7G98
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1433523487AD52A21E6BD1AB812F0C524137AF5971C23CB990DD4B0AE5EF1B8E4614FF3
sha3_384: 5d5b0da1778ddff4b73c6a7cb15667e32e08db3421e3dda8ae5c8d6120f9c5ce1a145d0d54b337e6300248d7bdfffeed
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-08-06 02:07:31

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: PROJECT ONE PIECE (OFFICAL).exe
LegalCopyright:
OriginalFilename: PROJECT ONE PIECE (OFFICAL).exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Trojan:MSIL/Disstl.ABZ!MTB also known as:

BkavW32.AIDetectNet.01
MicroWorld-eScanIL:Trojan.MSILZilla.46942
ALYacIL:Trojan.MSILZilla.46942
VIPREIL:Trojan.MSILZilla.46942
SangforVirus.Win32.Save.a
Cybereasonmalicious.3898e6
CyrenW32/Azorult.D.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/PSW.Agent.SCI
APEXMalicious
ClamAVWin.Packed.Msilzilla-9952126-0
KasperskyHEUR:Trojan-PSW.MSIL.Disco.gen
BitDefenderIL:Trojan.MSILZilla.46942
AvastWin32:DropperX-gen [Drp]
TencentTrojan-Psw.Msil.Disco.16000496
Ad-AwareIL:Trojan.MSILZilla.46942
EmsisoftIL:Trojan.MSILZilla.46942 (B)
DrWebTrojan.PWS.DiscordNET.50
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.0f620d6bdbf2a32d
SophosTroj/Steal-CQL
SentinelOneStatic AI – Malicious PE
GDataMSIL.Trojan-Stealer.DiscordStealer.D
AviraHEUR/AGEN.1203048
MAXmalware (ai score=85)
ArcabitIL:Trojan.MSILZilla.DB75E
MicrosoftTrojan:MSIL/Disstl.ABZ!MTB
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win.Generic.C5213108
Acronissuspicious
McAfeeGenericRXTG-UW!0F620D6BDBF2
MalwarebytesSpyware.PasswordStealer.MSIL
RisingStealer.Agent!8.C2 (TFE:dGZlOg0qc5jF0bwGoQ)
IkarusTrojan.MSIL.PSW
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.SCI!tr.pws
BitDefenderThetaGen:NN.ZemsilF.34582.fn0@aCP2Flk
AVGWin32:DropperX-gen [Drp]

How to remove Trojan:MSIL/Disstl.ABZ!MTB?

Trojan:MSIL/Disstl.ABZ!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment