MSIL/ClipBanker.PB removal guide

The MSIL/ClipBanker.PB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/ClipBanker.PB virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSIL/ClipBanker.PB?


File Info:
crc32: EB3791E5
md5: 4b4393d6b31ef404c1bf400bd366ea63
name: 4B4393D6B31EF404C1BF400BD366EA63.mlw
sha1: 0aad6a9ebf2e397264012066dfb9f5535b64faf7
sha256: adb83afc55cef47f07daa867cb5327179ee68ce49dfcaaef4543b321187ed42e
sha512: 4c37568073e5feb95c2d0ed5d8f20ff55033e3c7c631695b120e7155e37113d2a3fb28ae40b16416153f5d6e5fb3b6e96582fd853f6ff9b89eeb200088444ea1
ssdeep: 96:BweSKHub012UQ9pbFO6VZ+cN0EHNLqJ/VrpsI0wwRBzNt:BWKHg/UQphBT5qE4J/1psk6D
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: Crypto-Clipboard.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Crypto-Clipboard
ProductVersion: 1.0.0.0
FileDescription: Crypto-Clipboard
OriginalFilename: Crypto-Clipboard.exe

MSIL/ClipBanker.PB also known as:

DrWeb	Trojan.PWS.Stealer.28929
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ursu.848028
Cybereason	malicious.6b31ef
ESET-NOD32	a variant of MSIL/ClipBanker.PB
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
BitDefender	Gen:Variant.Ursu.848028
MicroWorld-eScan	Gen:Variant.Ursu.848028
Ad-Aware	Gen:Variant.Ursu.848028
F-Secure	Heuristic.HEUR/AGEN.1137599
BitDefenderTheta	Gen:NN.ZemsilF.34688.am0@aGxqZdo
FireEye	Gen:Variant.Ursu.848028
Emsisoft	Gen:Variant.Ursu.848028 (B)
Avira	HEUR/AGEN.1137599
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Ursu.DCF09C
ZoneAlarm	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
GData	Gen:Variant.Ursu.848028
AhnLab-V3	Malware/Win32.RL_Generic.C4101647
MAX	malware (ai score=86)
Panda	Trj/GdSda.A
Rising	Trojan.ClipBanker!8.5FB (TFE:dGZlOgwSndI5D2bSqQ)
AVG	Win32:TrojanX-gen [Trj]

How to remove MSIL/ClipBanker.PB?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

MSIL/ClipBanker.PB removal guide