Should I remove “MSIL/ClipBanker.JJ”?

The MSIL/ClipBanker.JJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/ClipBanker.JJ virus can do?

Presents an Authenticode digital signature
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine MSIL/ClipBanker.JJ?


File Info:
crc32: 9DEF1824
md5: 3e4f28e83521ebce26f93914623eba4b
name: 3E4F28E83521EBCE26F93914623EBA4B.mlw
sha1: 7aeeaf2d5aff800e54b0f591074becf89857e1cb
sha256: 764b0d8c0e937c5da487d26b6983f88a4232eb6e577f8b6b3e0dc1679dad4f16
sha512: 3fd3bfda0f073b3f61dc902fc0be59e709f76b964ad7fddbb88b9285d3eac016cbf27c7ba65250d67b5393878f05babe8731ff6d70f1721f2bf51a16d5990b0c
ssdeep: 1536:6SbbUUUUUUUUI3Swt3u8x/EZ206RjkHaiPWgsmc7spSWXiO:6SbbUUUUUUUUI3Swt3u8x/EZ206Rw6mr
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 license_error 2020
Assembly Version: 1.0.0.1472
InternalName: license_error.exe
FileVersion: 1.0.0.1472
CompanyName: license_error
LegalTrademarks: license_error
Comments: license_error
ProductName: license_error
ProductVersion: 1.0.0.1472
FileDescription: license_error
OriginalFilename: license_error.exe

MSIL/ClipBanker.JJ also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.34149843
McAfee	Artemis!3E4F28E83521
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.MSIL.Tasker.gen
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Trojan.GenericKD.34149843
K7GW	Trojan ( 0056a7b41 )
K7AntiVirus	Trojan ( 0056a7b41 )
Cyren	W32/Trojan.KXQU-8462
Symantec	Backdoor.Ratenjay
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Tasker.gen
Alibaba	Trojan:MSIL/ClipBanker.9803a5ae
Ad-Aware	Trojan.GenericKD.34149843
Emsisoft	Trojan.GenericKD.34149843 (B)
Comodo	Malware@#3fw2pz7kxtn3h
F-Secure	Trojan.TR/Spy.ClipBanker.ulkle
DrWeb	Trojan.ClipBankerNET.1
Zillya	Trojan.Tasker.Win32.2382
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Jiangmin	Trojan.MSIL.pvbg
Avira	TR/Spy.ClipBanker.ulkle
Antiy-AVL	Trojan/MSIL.Tasker
Arcabit	Trojan.Generic.D20915D3
ZoneAlarm	HEUR:Trojan.MSIL.Tasker.gen
Microsoft	Trojan:Win32/Ymacco.AA76
Cynet	Malicious (score: 85)
ALYac	Trojan.GenericKD.34149843
MAX	malware (ai score=87)
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
APEX	Malicious
ESET-NOD32	a variant of MSIL/ClipBanker.JJ
Tencent	Win32.Trojan.Falsesign.Llrr
Fortinet	MSIL/ClipBanker.JJ!tr
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml

How to remove MSIL/ClipBanker.JJ?

MSIL/ClipBanker.JJ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X