What is “Trojan:Win32/ClipBanker!MTB”?

The Trojan:Win32/ClipBanker!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/ClipBanker!MTB virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Trojan:Win32/ClipBanker!MTB?


File Info:
crc32: 726FC9FB
md5: 91960a7432f55d14b552c45ce887ba86
name: 91960A7432F55D14B552C45CE887BA86.mlw
sha1: 6c64c4a91339e4a124e96a61900a146462a5d32f
sha256: c039b400d495d1901f4f7d9e716ce30912a8146510bb884ca5fc88bdeb6bc62a
sha512: da65bcca68f9465d5c262e822005bdf6b9482f41c12bbf2d9b7d73e0c6f4d5d9af812b93f9993487dc420b929efc840ba27f9e3f2b3d9daa3060eba10cf7a5f6
ssdeep: 1536:uqdg3/tNVVVE0T9qzftlUUDCZNfJwgPSpbhHJgENDPcfku8j563yXWgr6BTvC4:ulFTs8U+Nwy8bhpgENIf5eOTB
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: MSASCUI
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16385
FileDescription: Windows Defender User Interface
OriginalFilename: MSASCUI.exe
Translation: 0x0409 0x04b0

Trojan:Win32/ClipBanker!MTB also known as:

K7AntiVirus	Trojan ( 0055e0101 )
DrWeb	Trojan.ClipBankerNET.15
Cynet	Malicious (score: 99)
ALYac	Trojan.Clipbanker.A
Cylance	Unsafe
Zillya	Trojan.ClipBanker.Win32.2498
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	TrojanBanker:MSIL/ClipBanker.59293b44
K7GW	Trojan ( 0055e0101 )
Cybereason	malicious.432f55
Cyren	W32/Clipbnkr.CKLT-5042
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	MSIL/ClipBanker.NC
Zoner	Trojan.Win32.87360
APEX	Malicious
Avast	Other:Malware-gen [Trj]
Kaspersky	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
BitDefender	Trojan.GenericKD.32893326
NANO-Antivirus	Trojan.Win32.ClipBanker.gurduv
MicroWorld-eScan	Trojan.GenericKD.32893326
Tencent	Msil.Trojan-banker.Clipbanker.Hsig
Ad-Aware	Trojan.GenericKD.32893326
Sophos	Mal/Generic-S + Mal/Generic-L
Comodo	Malware@#3s7oif04oks81
BitDefenderTheta	Gen:NN.ZemsilF.34678.gm0@aKJl7Eei
VIPRE	Win32.Malware!Drop
TrendMicro	TrojanSpy.MSIL.CLIPBANKER.AC
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.91960a7432f55d14
Emsisoft	Malware.Generic.CN1 (A)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Banker.MSIL.bff
Webroot	W32.Trojan.Gen
Avira	TR/Spy.ClipBanker.qeofi
Microsoft	Trojan:Win32/ClipBanker!MTB
Arcabit	Trojan.Generic.D1F5E98E
AegisLab	Trojan.MSIL.ClipBanker.7!c
ZoneAlarm	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
GData	Win32.Trojan.Agent.HLSIWR
AhnLab-V3	Trojan/Win32.ClipBanker.C3862218
McAfee	Artemis!91960A7432F5
MAX	malware (ai score=85)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Trojan.Banker
Panda	Trj/WLT.F
TrendMicro-HouseCall	TrojanSpy.MSIL.CLIPBANKER.AC
Rising	Trojan.ClipBanker!8.5FB (KTSE)
Ikarus	Trojan.MSIL.ClipBanker
MaxSecure	Trojan.Malware.73489558.susgen
Fortinet	MSIL/ClipBanker.NC!tr
AVG	Other:Malware-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/TrojanSpy.ClipBanker.HgIASOkA

How to remove Trojan:Win32/ClipBanker!MTB?

Trojan:Win32/ClipBanker!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X