Malware

MSIL/ClipBanker.BX (file analysis)

Malware Removal

The MSIL/ClipBanker.BX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What MSIL/ClipBanker.BX virus can do?

  • Executable code extraction
  • Creates RWX memory

How to determine MSIL/ClipBanker.BX?



File Info:

crc32: 4667862C
md5: 0f0bdc5e5aa5e2b922c717ba76912c4f
name: 0F0BDC5E5AA5E2B922C717BA76912C4F.mlw
sha1: 340cf2340e029a2fa6b171fde9dfe547f6f62652
sha256: 926c908d9f88d31463cab8d9121c0216227f39c225d87d143e5af29bc00842ff
sha512: 400ac37b759a0431fc25e69b91079f6ee5c6346e19dcd41b8f7f88460a1c53c62cf626fed3403e57c53c1ef074b0ef43cf0fa29a7e05a396eefa3d7f87a4c811
ssdeep: 3072:rel9jnpsMc1mtNXSrU2rsP4XuRpmqxG8baoYX2JLGVfyhBCanfb1BWDAOAlS7gr:SpsMc1kqUSsAXU
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows


Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 5.3.0.9
InternalName: JUsgg.exe
FileVersion: 3.5.3.3
ProductVersion: 3.5.3.3
FileDescription: Windows
OriginalFilename: JUsgg.exe

MSIL/ClipBanker.BX also known as:

K7AntiVirusTrojan ( 0050c8ce1 )
Elasticmalicious (high confidence)
DrWebTrojan.ClipBankerNET.5
CynetMalicious (score: 85)
ALYacGen:Variant.MSILPerseus.228940
CylanceUnsafe
ZillyaTrojan.ClipBanker.Win32.186
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:MSIL/ClipBanker.0084234b
K7GWTrojan ( 0050c8ce1 )
Cybereasonmalicious.e5aa5e
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/ClipBanker.BX
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Dropper.Zusy-7619646-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.MSILPerseus.228940
NANO-AntivirusTrojan.Win32.Fuery.epfouy
MicroWorld-eScanGen:Variant.MSILPerseus.228940
TencentWin32.Trojan.Generic.Fsd
Ad-AwareGen:Variant.MSILPerseus.228940
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1103784
BitDefenderThetaGen:NN.ZemsilF.34628.nq0@a8!K9Oc
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis
FireEyeGeneric.mg.0f0bdc5e5aa5e2b9
EmsisoftGen:Variant.MSILPerseus.228940 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.gkkvj
AviraHEUR/AGEN.1103784
Antiy-AVLTrojan/Win32.AGeneric
MicrosoftBackdoor:Win32/Bladabindi!ml
ArcabitTrojan.MSILPerseus.D37E4C
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.MSILPerseus.228940
AhnLab-V3Trojan/Win32.Agent.R205422
McAfeeArtemis!0F0BDC5E5AA5
MAXmalware (ai score=84)
VBA32TScope.Trojan.MSIL
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/GdSda.A
YandexTrojan.Agent!YwEQlqFOpO0
IkarusTrojan.MSIL.ClipBanker
FortinetMSIL/Generic.AP.DABC4!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.Generic.HgIASOoA

How to remove MSIL/ClipBanker.BX?

MSIL/ClipBanker.BX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment