Trojan-Banker.MSIL.ClipBanker.qc malicious file

The Trojan-Banker.MSIL.ClipBanker.qc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Banker.MSIL.ClipBanker.qc virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Trojan-Banker.MSIL.ClipBanker.qc?


File Info:
crc32: 238D4521
md5: ed59308f9e2b59ec4195a99788cee8ee
name: ED59308F9E2B59EC4195A99788CEE8EE.mlw
sha1: e551671c761bd95746410e2e9eaf2b375f7a330a
sha256: 6ff9c8970fd7f82d4e1f448f9d9c32a7f8888eebc3a4a1a0c7c3f1d35965562a
sha512: 7a52fb4b46c3ac5a6b12923de3898125e6ef952caf1277e7771bc9d504920d51240c854ffa91a97f653c91ff47eef0de927461d5612fed09c9a887ed11bac2dc
ssdeep: 1536:dHqqPmUWdlNl0U8j/loojDK0op44lK4OZJab7ugtKbudIZcqbzeS5sSD:d/Pm5TWhdxV6ePZAXugtmuWZcqnV3D
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: 
Assembly Version: 1.0.0.2
InternalName: 
FileVersion: 1.0.0.2
CompanyName: 
LegalTrademarks: 
Comments: sdfgsdfsd
ProductName: 
ProductVersion: 1.0.0.2
FileDescription: sdfgsdfsd
OriginalFilename: 
Translation: 0x0000 0x04b0

Trojan-Banker.MSIL.ClipBanker.qc also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen13.57339
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:MSIL/GenKryptik.35dce7a0
K7GW	Trojan ( 005733031 )
Cybereason	malicious.c761bd
Cyren	W32/MSIL_Kryptik.DVF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/GenKryptik.EWGN
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan-Banker.MSIL.ClipBanker.qc
BitDefender	Trojan.GenericKD.37105241
MicroWorld-eScan	Trojan.GenericKD.37105241
Ad-Aware	Trojan.GenericKD.37105241
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34738.jm0@aOOIHyg
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
FireEye	Generic.mg.ed59308f9e2b59ec
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
AegisLab	Trojan.Multi.Generic.4!c
ZoneAlarm	Trojan-Banker.MSIL.ClipBanker.qc
GData	Trojan.GenericKD.37105241
McAfee	RDN/PWS-Banker
MAX	malware (ai score=85)
VBA32	CIL.HeapOverride.Heur
Malwarebytes	MachineLearning/Anomalous.96%
TrendMicro-HouseCall	TROJ_GEN.R002H0DFF21
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/ClipBanker.EWGN!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Trojan-Banker.MSIL.ClipBanker.qc?

Trojan-Banker.MSIL.ClipBanker.qc removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X