Win32/ClipBanker.FR (file analysis)

The Win32/ClipBanker.FR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/ClipBanker.FR virus can do?

Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/ClipBanker.FR?


File Info:
crc32: E0A2B13A
md5: 664975d8b76560f498aecbd93be525e3
name: 664975D8B76560F498AECBD93BE525E3.mlw
sha1: a3cdba913faffff6f28a892d02a7b2b4558cb058
sha256: c73cb5520571a19271318fe1c31968c50f0e2466d150391e27b55b4054ecd265
sha512: a1daa83e3ac4983ed87b89a7f67a9d650eb023111dfa718230159dfa9e2caf85cff5aed232b84ef19eda75f91c7d70b214237be8f858401011082fb9c88b46b7
ssdeep: 12288:hL5cVzm8Kpq2yCUBQ4xJI7LEITg9P+zC8b:z8lBQ43I7LEITUPpY
type: MS-DOS executable, MZ for MS-DOS

Version Info:
0: [No Data]

Win32/ClipBanker.FR also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.30688535
Sangfor	Trojan.Win32.Generic.ky
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.8b7656
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/ClipBanker.FR
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKD.30688535
NANO-Antivirus	Trojan.Win32.ClipBanker.fcmqku
MicroWorld-eScan	Trojan.GenericKD.30688535
Tencent	Malware.Win32.Gencirc.114ce9cd
Ad-Aware	Trojan.GenericKD.30688535
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
FireEye	Generic.mg.664975d8b76560f4
Emsisoft	Trojan.GenericKD.30688535 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/ClipBanker.jjadk
Microsoft	Trojan:Win32/Tiggre!rfn
GData	Trojan.GenericKD.30688535
AhnLab-V3	Trojan/Win32.SpyEyes.R226647
McAfee	Artemis!664975D8B765
MAX	malware (ai score=94)
VBA32	BScope.Trojan.Bitrep
Panda	Trj/CI.A
Yandex	Trojan.Agent!98wvmqc7DmY
Ikarus	Trojan.Win32.Tiggre
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/TrojanSpy.ClipBanker.HgIASWEA

How to remove Win32/ClipBanker.FR?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32/ClipBanker.FR (file analysis)