Trojan:MSIL/ClipBanker.V!MTB removal

The Trojan:MSIL/ClipBanker.V!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/ClipBanker.V!MTB virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:MSIL/ClipBanker.V!MTB?


File Info:
crc32: ADC6A888
md5: 88e19bb0b9730c8a3e6918119dc3cce1
name: 88E19BB0B9730C8A3E6918119DC3CCE1.mlw
sha1: 258d69e723c1506a7b1fe81490aac01b50d4134a
sha256: 975092c8639b77be0c7753fded14e1e6a2f8e6ebe99d1bc5ac0e800a9a730756
sha512: ab1ead985c07c0d947f42e91349ed16ed91ddf394c30a13b01ec67bd3b4ecb7e9c20dd04f437f7781bf2eb2728db409bb3265fdabd8286abc74da65e82144266
ssdeep: 192:FGO8OgmVEB7vV78uGRbEUgeMM2ghyWxFujjf8lY:FGO8p6u+tlGghyWxEnf8l
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: Sys32Hotfix.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Sys32Hotfix
ProductVersion: 1.0.0.0
FileDescription: Sys32Hotfix
OriginalFilename: Sys32Hotfix.exe

Trojan:MSIL/ClipBanker.V!MTB also known as:

K7AntiVirus	Trojan ( 0057f1f11 )
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	Gen:Variant.Bulz.447690
Zillya	Trojan.ClipBanker.Win32.9211
CrowdStrike	win/malicious_confidence_60% (W)
K7GW	Trojan ( 0057f1f11 )
ESET-NOD32	a variant of MSIL/ClipBanker.VM
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
BitDefender	Gen:Variant.Bulz.447690
MicroWorld-eScan	Gen:Variant.Bulz.447690
Ad-Aware	Gen:Variant.Bulz.447690
BitDefenderTheta	Gen:NN.ZemsilF.34170.am0@a8v0ohg
FireEye	Generic.mg.88e19bb0b9730c8a
Emsisoft	Gen:Variant.Bulz.447690 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1144272
Antiy-AVL	Trojan/Generic.ASMalwS.32E5842
Microsoft	Trojan:MSIL/ClipBanker.V!MTB
GData	Gen:Variant.Bulz.447690
AhnLab-V3	Trojan/Win.Generic.C4445586
MAX	malware (ai score=83)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.3553895423
Panda	Trj/GdSda.A
Ikarus	Trojan.MSIL.ClipBanker
AVG	Win32:Malware-gen

How to remove Trojan:MSIL/ClipBanker.V!MTB?

Trojan:MSIL/ClipBanker.V!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X