MSIL/ClipBanker.QC information

The MSIL/ClipBanker.QC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/ClipBanker.QC virus can do?

How to determine MSIL/ClipBanker.QC?


File Info:
crc32: D6192521
md5: e4f6cacd93701737661af2505e1f884f
name: E4F6CACD93701737661AF2505E1F884F.mlw
sha1: 21e29b86ab97b5377b3de64ec9c5135e28aa2a8f
sha256: 58afa8141ed985bbbdf6705f44bf4ffb1b2d41cdd5fcb3b79d06259723b2983b
sha512: 45a508e555dd1966648ebc6a2d8686eac5814d4ada0d92b61828205831cb4eb2593149352ef4b588b1403eb8a9946467c25565aa335e0c80cd243db8db71163f
ssdeep: 768:jqyqy3cheZFelQ8SHQ1p56PFdGf1pdrWqjYDCWh0Su4wjQ8hKKpBTxuNo6:VFeldr1p5VNGgYnCpLjQ88KPTxuNo6
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 RrofZKlGw321O_k 2019
Assembly Version: 7.4.9.4
InternalName: gtasa.exe
FileVersion: 8.5.1.5
Comments: 7icBdCllJK_eKXt
ProductName: Free
ProductVersion: 8.5.1.5
FileDescription: Gc_qm9rb0OCvl9e
OriginalFilename: gtasa.exe

MSIL/ClipBanker.QC also known as:

K7AntiVirus	Spyware ( 00558a7d1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 85)
ALYac	Trojan.GenericKD.43330843
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.1343970
Sangfor	Trojan.Win32.Save.a
Alibaba	Trojan:MSIL/Tasker.6d285656
K7GW	Spyware ( 00558a7d1 )
Cybereason	malicious.d93701
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/ClipBanker.QC
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Tasker.gen
BitDefender	Trojan.GenericKD.43330843
NANO-Antivirus	Trojan.Win32.Tasker.hovwdv
MicroWorld-eScan	Trojan.GenericKD.43330843
Tencent	Msil.Trojan.Tasker.Amly
Ad-Aware	Trojan.GenericKD.43330843
Sophos	Mal/Generic-S
Comodo	Malware@#udm7ljakc938
BitDefenderTheta	Gen:NN.ZemsilF.34670.em0@a4wOtdg
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.e4f6cacd93701737
Emsisoft	Trojan.GenericKD.43330843 (B)
Avira	HEUR/AGEN.1106071
eGambit	Unsafe.AI_Score_95%
Microsoft	Backdoor:Win32/Bladabindi!ml
Arcabit	Trojan.Generic.D2952D1B
GData	Trojan.GenericKD.43330843
AhnLab-V3	Malware/Win32.Generic.R293445
McAfee	Artemis!E4F6CACD9370
MAX	malware (ai score=89)
VBA32	CIL.HeapOverride.Heur
Panda	Trj/CI.A
Ikarus	Trojan.MSIL.Spy
Fortinet	MSIL/Tasker.CDB!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Backdoor.Tasker.HgIASOgA

How to remove MSIL/ClipBanker.QC?

MSIL/ClipBanker.QC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X