Malware

Should I remove “MSIL/ClipBanker.H”?

Malware Removal

The MSIL/ClipBanker.H is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL/ClipBanker.H virus can do?

  • The binary likely contains encrypted or compressed data.

How to determine MSIL/ClipBanker.H?


File Info:

crc32: 62ADE492
md5: 91a5f71c81519ad69377267cd5b80ceb
name: 91A5F71C81519AD69377267CD5B80CEB.mlw
sha1: dbc3efb6182030858e8a166db7352dd43b0f168e
sha256: 8c96654f0ea3196d50e97ecfd123b878f3ce1afa937bde27aa335fefd8b5d9b5
sha512: a8f7a0caaf18dcb84d7b72fccd619232b13a0bdea193d6904533a418ed66980dc353255eefba930e8ae74c504bdaa4e8c83215d3977a7cfe938fec2722998891
ssdeep: 12288:3ijx7a9BTsONvS5A17a9BTsONPVZZjDAp0WG:3ij1aL/S5A5aLdZZjcCd
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright 1984-2012 Adobe Systems Incorparated and its licensors. All rights reserved.
Assembly Version: 11.0.10.32
InternalName: AwesomeMinerKG.exe
FileVersion: 11.0.10.32
ProductName: AwesomeMinerKG
ProductVersion: 11.0.10.32
FileDescription: AwesomeMinerKG
OriginalFilename: AwesomeMinerKG.exe

MSIL/ClipBanker.H also known as:

K7AntiVirusTrojan ( 004bc22a1 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop8.34918
CynetMalicious (score: 99)
ALYacTrojan.Crypt.Gen.1
CylanceUnsafe
ZillyaTrojan.Crypt.Win32.44148
SangforTrojan.Win32.Generic.ky
CrowdStrikewin/malicious_confidence_60% (D)
AlibabaTrojan:MSIL/ClipBanker.fa62f3a3
K7GWTrojan ( 004bc22a1 )
Cybereasonmalicious.c81519
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/ClipBanker.H
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Crypt.Gen.1
NANO-AntivirusTrojan.Win32.ClipBanker.fhtkns
MicroWorld-eScanTrojan.Crypt.Gen.1
TencentMalware.Win32.Gencirc.114d4ba0
Ad-AwareTrojan.Crypt.Gen.1
SophosMal/Generic-R + Mal/CoinSteal-C
ComodoMalware@#alj3lfa45626
BitDefenderThetaGen:NN.ZemsilF.34670.ym3@aaYahHh
TrendMicroTSPY_COINSTEAL.SM2
McAfee-GW-EditionBehavesLike.Win32.Backdoor.fc
FireEyeGeneric.mg.91a5f71c81519ad6
EmsisoftTrojan.Crypt.Gen.1 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.cnrui
AviraTR/Spy.ClipBanker.sueby
MicrosoftBackdoor:Win32/Bladabindi!ml
ArcabitTrojan.Crypt.Gen.1
GDataMSIL.Trojan.ClipBanker.C
AhnLab-V3Trojan/Win32.Skeeyah.C2723114
McAfeeRDN/Generic PWS.nt
MAXmalware (ai score=100)
VBA32TScope.Trojan.MSIL
PandaTrj/GdSda.A
TrendMicro-HouseCallTSPY_COINSTEAL.SM2
RisingTrojan.ClipBanker!8.5FB (CLOUD)
YandexTrojan.Agent!V/tmGaKF6iI
IkarusTrojan.MSIL.ClipBanker
FortinetMSIL/CoinStealer.W!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/TrojanSpy.ClipBanker.HgAASRkA

How to remove MSIL/ClipBanker.H?

MSIL/ClipBanker.H removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment