MSIL/ClipBanker.TX information

The MSIL/ClipBanker.TX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/ClipBanker.TX virus can do?

Anomalous binary characteristics

How to determine MSIL/ClipBanker.TX?


File Info:
crc32: 45C51F24
md5: 2097b96d4443656f3df88109fd37a65e
name: 2097B96D4443656F3DF88109FD37A65E.mlw
sha1: 72b3c24e865a1b751d6a679a6181b8049e0e5d99
sha256: 68fe9227dfa811b0b09d1d4e0707b8b7e931bf555c5f79ca99d43f5935e70686
sha512: 7dc34c07be01d3d459ed2597b96a49e6ee0892d22c204561571a5900af62b206383ad798bf46791b40c5f055f6be48bbb27515141deb1e105e2532dfca77cbf6
ssdeep: 192:jTZcm35CJatcDDQXWy1ypy5xKGIclp46Ip1GKsJ9oZjlAfz0SuOjTn:jTZjisc/QXWyoFclpJKkkjyr5NP
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: BTC.exe
FileVersion: 1.0.0.0
ProductName: BTC
ProductVersion: 1.0.0.0
FileDescription: BTC
OriginalFilename: BTC.exe

MSIL/ClipBanker.TX also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.e865a1
Cyren	W32/Trojan.SW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/ClipBanker.TX
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
Kaspersky	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34608.am0@aWoX0l
TrendMicro	TrojanSpy.MSIL.CLIPBANKER.SM
FireEye	Generic.mg.2097b96d4443656f
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:MSIL/ClipBanker.GA!MTB
ZoneAlarm	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
GData	MSIL.Trojan.ClipBanker.F
AhnLab-V3	Malware/Win32.RL_Trojanspy.C4333068
Malwarebytes	Malware.AI.2202850214
TrendMicro-HouseCall	TrojanSpy.MSIL.CLIPBANKER.SM
Rising	Spyware.ClipBanker!1.D058 (CLASSIC)
Ikarus	Trojan.ILCrypt
AVG	Win32:MalwareX-gen [Trj]

How to remove MSIL/ClipBanker.TX?

MSIL/ClipBanker.TX removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X