Trojan.ClipBanker.MSIL removal

The Trojan.ClipBanker.MSIL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.ClipBanker.MSIL virus can do?

Network activity detected but not expressed in API logs

How to determine Trojan.ClipBanker.MSIL?


File Info:
crc32: 3DFD0152
md5: 67094e173769d58f98525f140d715be6
name: ss.exe
sha1: e28b66c6c00d4c60c4ab839e53bfe10ef24a0499
sha256: 5d612bc72dd46375629a8f04b3f540f6543cd5d84b2ab7702ace30f4f63181a3
sha512: 002be57bcd40bb1301902705eed52575303d359a17c20b54975071dd7fafe1be266a230e6fa167092aff2e782db1825e81aea9d2a459840fb305f35533f161d4
ssdeep: 768:TIPX2ippmpPTVeKbcPkfrrCRMTNfVf29ytAuHButRYy+FqQ8bXyQFq6H68GD2:KViHkDYy8qQ8bXyQFFHm2
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright 2017 Google Inc. All rights reserved.
Assembly Version: 67.0.100.99
InternalName: ss.exe
FileVersion: 67.0.100.99
CompanyName: Google Chrome
Comments: Google Chrome
ProductName: Google Chrome
ProductVersion: 67.0.100.99
FileDescription: Google Chrome
OriginalFilename: ss.exe

Trojan.ClipBanker.MSIL also known as:

MicroWorld-eScan	Trojan.GenericKD.42929582
CAT-QuickHeal	Trojan.Disfa.18683
Qihoo-360	Generic/Trojan.f6f
McAfee	RDN/PWS-Banker
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0055aecd1 )
BitDefender	Trojan.GenericKD.42929582
K7GW	Trojan ( 0055aecd1 )
CrowdStrike	win/malicious_confidence_90% (W)
TrendMicro	Trojan.Win32.WACATAC.THDOCBO
BitDefenderTheta	Gen:NN.ZemsilF.34104.eq0@a0Kk0cf
TrendMicro-HouseCall	Trojan.Win32.WACATAC.THDOCBO
Avast	Win32:Trojan-gen
GData	Trojan.GenericKD.42929582
Kaspersky	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
Alibaba	TrojanBanker:MSIL/ClipBanker.8be185f8
AegisLab	Trojan.MSIL.ClipBanker.7!c
APEX	Malicious
Tencent	Msil.Trojan-banker.Clipbanker.Wmiz
Ad-Aware	Trojan.GenericKD.42929582
Emsisoft	Trojan.GenericKD.42929582 (B)
F-Secure	Trojan.TR/ATRAPS.Gen
DrWeb	Trojan.ClipBankerNET.7
Invincea	heuristic
McAfee-GW-Edition	RDN/PWS-Banker
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Jiangmin	Trojan.Banker.MSIL.bpq
Webroot	W32.Backdoor.Gen
Avira	TR/ATRAPS.Gen
MAX	malware (ai score=81)
Endgame	malicious (high confidence)
Arcabit	Trojan.Generic.D28F0DAE
ZoneAlarm	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
Microsoft	Trojan:Win32/Occamy.C
Acronis	suspicious
Malwarebytes	Trojan.ClipBanker.MSIL
Panda	Trj/GdSda.A
ESET-NOD32	a variant of MSIL/ClipBanker.MO
Rising	Trojan.ClipBanker!8.5FB (CLOUD)
Ikarus	Trojan.MSIL.Crypt
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/ClipBanker.MO!tr
AVG	Win32:Trojan-gen
Cybereason	malicious.6c00d4
Paloalto	generic.ml

How to remove Trojan.ClipBanker.MSIL?

Trojan.ClipBanker.MSIL removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X