Win32/ClipBanker.CK information

The Win32/ClipBanker.CK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/ClipBanker.CK virus can do?

Executable code extraction
Creates RWX memory
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs

How to determine Win32/ClipBanker.CK?


File Info:
crc32: 613925C5
md5: 0daa7e19e803b46704bd5a326b1a819f
name: 0DAA7E19E803B46704BD5A326B1A819F.mlw
sha1: ead16f35cd143a6f2ba16f4747ea7b316847d5be
sha256: d50fc01a0b068e10a6e3420e6c95704f29267310654e505f35366fd8e4bf6f70
sha512: 1d00f97490bf354aafa4beb694d14433b7d7842fb86c022e542df19ae0a702fc33a83e0dd8aa0cd96a128f208150261c3e736555c7f12ba226e798967daf0a0d
ssdeep: 24576:GB1T/6DB75T7S3bTIUwHsrxYYpxUbXfzzKeLCKc1q0ZUnWmN:nDB754bj0z6bV1qqU
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2018
Assembly Version: 27.45.8.78
InternalName: Windows Application eethereum.exe
FileVersion: 74.5.66.54
ProductName: Windows Application eethereum
ProductVersion: 74.5.66.54
FileDescription: Windows Application eethereum
OriginalFilename: Windows Application eethereum.exe

Win32/ClipBanker.CK also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.AutoHK.l!c
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.5cd143
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/ClipBanker.CK
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Spy.Win32.AutoHK.cw
Tencent	Win32.Trojan-spy.Autohk.Isw
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34142.kr0@aqADD5
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.0daa7e19e803b467
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanSpy.AutoHK.r
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Occamy.C
McAfee	Artemis!0DAA7E19E803
Panda	Trj/GdSda.A
Yandex	TrojanSpy.AutoHK!py2QvyobsMg
Ikarus	Trojan-Spy.Win32.AutoHK
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/AutoHK.CW!tr
AVG	Win32:Malware-gen

How to remove Win32/ClipBanker.CK?

Win32/ClipBanker.CK removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X