Win32/ClipBanker.AF (file analysis)

The Win32/ClipBanker.AF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/ClipBanker.AF virus can do?

How to determine Win32/ClipBanker.AF?


File Info:
crc32: 102E1D9E
md5: a614463cf11b4339a96d996ca189ddc9
name: A614463CF11B4339A96D996CA189DDC9.mlw
sha1: 6bcc404a8027cf41b19f63fa2c46d49360d067e1
sha256: b88c8ac129f391ebe959b29673a56895c90987c2102acf0c7922bdf8cf5ecbfc
sha512: f619bc200bfb5899e752ec63d1035a1b017c3e6a43ed87f313251ac8dc66a907479f709422910c11c6f809bdcc9a783ccc54a89a44d1613c91c62c9d770809d7
ssdeep: 3072:HCQ8gD76yTlAS0fEpcr8yy1N9BK58hg8URxwLYF2SAg0Fujop+qVnh1:HCQ8fXfuo90NDK5LlAOA+yh1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Win32/ClipBanker.AF also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0050b3061 )
Lionic	Trojan.Win32.CryptoShuffler.4!c
Cynet	Malicious (score: 99)
Cylance	Unsafe
Zillya	Trojan.CryptoShuffler.Win32.2
Alibaba	TrojanBanker:Win32/ClipBanker.c3dd0acc
K7GW	Trojan ( 0050b3061 )
Cybereason	malicious.a8027c
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/ClipBanker.AF
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan-Banker.Win32.ClipBanker.gen
NANO-Antivirus	Trojan.Win32.ClipBanker.evdcdh
Tencent	Win32.Trojan-banker.Cryptoshuffler.Lkdg
Sophos	Mal/Generic-S (PUA)
Comodo	Malware@#y2u6c21nt4f3
BitDefenderTheta	Gen:NN.ZexaF.34796.nyW@amHYUFei
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.a614463cf11b4339
Avira	TR/ClipBanker.oqpqq
Microsoft	Trojan:Win32/Tiggre!rfn
McAfee	Artemis!A614463CF11B
MAX	malware (ai score=100)
Panda	Trj/GdSda.A
Rising	Trojan.Generic@ML.87 (RDML:QxbmnITY307KQ4G+uUAbGg)
Ikarus	Trojan.Win32.Clipbanker
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/ClipBanker.AF!tr
AVG	FileRepMalware
Qihoo-360	Win32/TrojanSpy.ClipBanker.HwoCEpsA

How to remove Win32/ClipBanker.AF?

Win32/ClipBanker.AF removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X