MSIL/ClipBanker.MO information

The MSIL/ClipBanker.MO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/ClipBanker.MO virus can do?

Network activity detected but not expressed in API logs

How to determine MSIL/ClipBanker.MO?


File Info:
crc32: 01B225AF
md5: cf6274eea6aca809c69578e83eb942d3
name: pel.exe
sha1: 6083e979e4b642f4aa1259d53be535c3b475662d
sha256: 23095461296948cfafc835d666a8c2e366df6f3b36f0116011b808a2bdb033ba
sha512: bf523eaeb987f0a35accc53a26390c379a4d985ef05ca98f7d7e012ab5a432943e913a3b22fc411f33c2082198cdfb36a46595c169a866879f3940f23ef84bc8
ssdeep: 768:dcPie9aBkkzCvY4KnZ4EUu9mCGX1H9gDTSmuAy2vOz2G3Mg:oie9aBk83tUWGJ9gPSmFDvODV
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 1996-2020 VideoLAN and VLC Author
Assembly Version: 3.2.3.1
InternalName: pel.exe
FileVersion: 3.2.3.1
CompanyName: VLC media player
LegalTrademarks: VLC media player, VideoLAN and x264 are registered trademarks from VideoLAN
Comments: VLC media player
ProductName: VLC media player
ProductVersion: 3.2.3.1
FileDescription: VLC media player
OriginalFilename: pel.exe

MSIL/ClipBanker.MO also known as:

FireEye	Trojan.GenericKD.43553800
Malwarebytes	Trojan.ClipBanker
K7AntiVirus	Trojan ( 0056a61a1 )
BitDefender	Trojan.GenericKD.43553800
K7GW	Trojan ( 0056a61a1 )
Cybereason	malicious.9e4b64
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZemsilF.34138.dq0@aCulfFe
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
GData	Win32.Trojan.ClipBanker.ENBA09
Kaspersky	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
Alibaba	Trojan:MSIL/ClipBanker.5fe59b8d
F-Secure	Trojan.TR/Spy.ClipBanker.lhumg
Ikarus	Trojan.MSIL.ClipBanker
Avira	TR/Spy.ClipBanker.lhumg
Endgame	malicious (high confidence)
AegisLab	Trojan.Multi.Generic.4!c
ZoneAlarm	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
Microsoft	Trojan:Win32/Ditertag.A
McAfee	Artemis!CF6274EEA6AC
Cylance	Unsafe
ESET-NOD32	a variant of MSIL/ClipBanker.MO
Rising	Trojan.ClipBanker!8.5FB (CLOUD)
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/ClipBanker.MO!tr
AVG	Win32:MalwareX-gen [Trj]
Avast	Win32:MalwareX-gen [Trj]
CrowdStrike	win/malicious_confidence_80% (W)
Qihoo-360	Win32/Trojan.c96

How to remove MSIL/ClipBanker.MO?

MSIL/ClipBanker.MO removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X