MSIL/ClipBanker.HJ malicious file

The MSIL/ClipBanker.HJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/ClipBanker.HJ virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/ClipBanker.HJ?


File Info:
crc32: 28B964CF
md5: 74dca91085347ad3c9a0d650c0e8d615
name: 74DCA91085347AD3C9A0D650C0E8D615.mlw
sha1: e31546b6843a3f78bc6d033ffd3e1c05090a4d98
sha256: c894949fb62f6746ad8641d3a434e9e600f25ba2cd065458752a6e3fe7fc3893
sha512: 4bc111c4f1461624c9ce93dffe5342d6fd7994bda61ceebac295db34bafd4e1371b13e845229fcb94f2b25eb26b0a1574b99423864bb280eb00a973bb7d5578d
ssdeep: 96:sKwFHdt007ootTxIkhPNGEh9+GzG+tXuFkb7D7Yn18+fECFpAf6uDozNt:edqOfBh8Ehs0GgXuib7gpfECAf66q
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 1.0.0.0
InternalName: Console Framework.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Console Framework
ProductVersion: 1.0.0.0
FileDescription: Console Framework
OriginalFilename: Console Framework.exe

MSIL/ClipBanker.HJ also known as:

K7AntiVirus	Trojan ( 005411691 )
Lionic	Trojan.Win32.Generic.4!c
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Johnnie.142617
Cylance	Unsafe
Zillya	Trojan.Generic.Win32.345565
Alibaba	Trojan:MSIL/ClipBanker.3864e075
K7GW	Trojan ( 005411691 )
Cybereason	malicious.085347
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/ClipBanker.HJ
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Johnnie.142617
NANO-Antivirus	Trojan.Win32.ClipBanker.fkfiut
MicroWorld-eScan	Gen:Variant.Johnnie.142617
Tencent	Win32.Trojan.Spy.Ajce
Ad-Aware	Gen:Variant.Johnnie.142617
Comodo	Malware@#13fca38433dlf
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXGG-KX!74DCA9108534
FireEye	Gen:Variant.Johnnie.142617
Emsisoft	Gen:Variant.Johnnie.142617 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Spy.ClipBanker.qybuo
Antiy-AVL	Trojan/Generic.ASMalwS.2A7FCFD
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Johnnie.D22D19
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Johnnie.142617
AhnLab-V3	Malware/Win32.RL_Generic.R274032
McAfee	GenericRXGG-KX!74DCA9108534
MAX	malware (ai score=99)
VBA32	TScope.Trojan.MSIL
Panda	Trj/GdSda.A
Ikarus	Trojan.MSIL.ClipBanker
Fortinet	MSIL/Generic.AP.E744A7E!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/TrojanSpy.ClipBanker.HgIASQ0A

How to remove MSIL/ClipBanker.HJ?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/ClipBanker.HJ malicious file