arrow_back
search
close

TrojanSpy.Win32.CLIPBANKER.BF

March 04, 2020
 PLATFORM:

Windows

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 SYSTEM IMPACT RATING:
 INFORMATION EXPOSURE:

  • Threat Type: Trojan Spy

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

  TECHNICAL DETAILS

File Size:

8,362 bytes

File Type:

EXE

Memory Resident:

Yes

Initial Samples Received Date:

04 Mar 2020

Arrival Details

This Trojan Spy arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Other System Modifications

This Trojan Spy adds the following registry entries:

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_0 = "3959839046"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_0 = "7594"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_0 = "17000032"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_0 = "100"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_1 = "331945766"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_1 = "1768782487"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_1 = "1752039969"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_1 = "1768776741"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_2 = "3515601381"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_2 = "3537556729"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_2 = "3554258658"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_2 = "3537553638"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_3 = "539820452"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_3 = "1011366582"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_3 = "1028344483"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_3 = "1011362983"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_4 = "826217324"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_4 = "2780139089"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_4 = "2763454308"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_4 = "2780139872"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_5 = "1013432367"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_5 = "253945708"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_5 = "237081381"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_5 = "253949217"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_6 = "2706111734"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_6 = "2022735347"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_6 = "2039693286"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_6 = "2022726114"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_7 = "2666636722"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_7 = "3791496563"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_7 = "3774798759"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_7 = "3791502755"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_8 = "1558760062"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_8 = "1265319134"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_8 = "1248347240"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_8 = "1265312364"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_9 = "698544947"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_9 = "3034097048"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_9 = "3051085865"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_9 = "3034089005"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_10 = "1566910705"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_10 = "507901020"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_10 = "524717290"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_10 = "507898606"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_11 = "1758286410"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_11 = "2276679125"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_11 = "2259691691"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_11 = "2276675247"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_12 = "3596580098"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_12 = "4045451186"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_12 = "4028880236"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_12 = "4045452136"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_13 = "813426904"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_13 = "1519259194"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_13 = "1535996205"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_13 = "1519261481"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_14 = "2702083099"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_14 = "3288031678"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_14 = "3271040494"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_14 = "3288038378"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_15 = "4164121452"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_15 = "761839964"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_15 = "745257391"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_15 = "761847723"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_16 = "1058576063"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_16 = "2530630421"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_16 = "2547327600"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_16 = "2530624628"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_17 = "3968037605"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_17 = "4425844"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_17 = "21024305"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_17 = "4433973"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_18 = "3206170963"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_18 = "1773212354"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_18 = "1756523250"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_18 = "1773210870"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_19 = "3174623760"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_19 = "3541984084"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_19 = "3525121715"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_19 = "3541987511"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_20 = "542830807"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_20 = "1015792796"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_20 = "1032369012"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_20 = "1015797104"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_21 = "3070307484"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_21 = "2784568754"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_21 = "2767871797"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_21 = "2784573745"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_22 = "3466151263"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_22 = "258377457"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_22 = "241564662"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_22 = "258383346"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_23 = "3369846789"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_23 = "2027165712"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_23 = "2044159927"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_23 = "2027159987"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_24 = "1492264898"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_24 = "3795927867"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_24 = "3812753528"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_24 = "3795936892"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_25 = "1629114245"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_25 = "1269751746"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_25 = "1252895801"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_25 = "1269746237"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_26 = "1737801919"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_26 = "3038523594"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_26 = "3021949178"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_26 = "3038523134"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_27 = "1614824175"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_27 = "512341151"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_27 = "529200315"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_27 = "512332479"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_28 = "2568809510"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_28 = "2281100547"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_28 = "2264240508"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_28 = "2281109368"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_29 = "2419296611"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_29 = "4049879119"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_29 = "4033297725"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_29 = "4049886009"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_30 = "2676977056"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_30 = "1523688946"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_30 = "1540545022"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_30 = "1523695610"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_31 = "56750561"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_31 = "3292477645"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_31 = "3309061567"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_31 = "3292472251"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_32 = "3249197414"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_32 = "766285194"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_32 = "749727296"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_32 = "766281796"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A1_33 = "1056216116"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A2_33 = "2535060987"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A3_33 = "2518321665"

HKEY_CURRENT_USER\Software\Aasppapmmxkvs
A4_33 = "2535058437"

This report is generated via an automated analysis system.

  SOLUTION

Minimum Scan Engine:

9.850

Step 1

Before doing any scans, Windows 7, Windows 8, Windows 8.1, and Windows 10 users must disable System Restore to allow full scanning of their computers.

Step 2

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_0 = "3959839046"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_0 = "7594"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_0 = "17000032"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_0 = "100"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_1 = "331945766"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_1 = "1768782487"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_1 = "1752039969"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_1 = "1768776741"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_2 = "3515601381"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_2 = "3537556729"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_2 = "3554258658"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_2 = "3537553638"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_3 = "539820452"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_3 = "1011366582"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_3 = "1028344483"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_3 = "1011362983"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_4 = "826217324"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_4 = "2780139089"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_4 = "2763454308"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_4 = "2780139872"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_5 = "1013432367"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_5 = "253945708"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_5 = "237081381"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_5 = "253949217"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_6 = "2706111734"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_6 = "2022735347"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_6 = "2039693286"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_6 = "2022726114"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_7 = "2666636722"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_7 = "3791496563"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_7 = "3774798759"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_7 = "3791502755"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_8 = "1558760062"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_8 = "1265319134"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_8 = "1248347240"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_8 = "1265312364"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_9 = "698544947"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_9 = "3034097048"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_9 = "3051085865"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_9 = "3034089005"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_10 = "1566910705"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_10 = "507901020"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_10 = "524717290"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_10 = "507898606"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_11 = "1758286410"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_11 = "2276679125"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_11 = "2259691691"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_11 = "2276675247"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_12 = "3596580098"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_12 = "4045451186"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_12 = "4028880236"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_12 = "4045452136"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_13 = "813426904"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_13 = "1519259194"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_13 = "1535996205"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_13 = "1519261481"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_14 = "2702083099"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_14 = "3288031678"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_14 = "3271040494"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_14 = "3288038378"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_15 = "4164121452"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_15 = "761839964"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_15 = "745257391"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_15 = "761847723"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_16 = "1058576063"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_16 = "2530630421"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_16 = "2547327600"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_16 = "2530624628"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_17 = "3968037605"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_17 = "4425844"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_17 = "21024305"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_17 = "4433973"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_18 = "3206170963"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_18 = "1773212354"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_18 = "1756523250"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_18 = "1773210870"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_19 = "3174623760"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_19 = "3541984084"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_19 = "3525121715"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_19 = "3541987511"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_20 = "542830807"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_20 = "1015792796"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_20 = "1032369012"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_20 = "1015797104"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_21 = "3070307484"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_21 = "2784568754"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_21 = "2767871797"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_21 = "2784573745"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_22 = "3466151263"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_22 = "258377457"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_22 = "241564662"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_22 = "258383346"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_23 = "3369846789"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_23 = "2027165712"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_23 = "2044159927"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_23 = "2027159987"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_24 = "1492264898"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_24 = "3795927867"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_24 = "3812753528"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_24 = "3795936892"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_25 = "1629114245"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_25 = "1269751746"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_25 = "1252895801"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_25 = "1269746237"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_26 = "1737801919"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_26 = "3038523594"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_26 = "3021949178"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_26 = "3038523134"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_27 = "1614824175"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_27 = "512341151"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_27 = "529200315"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_27 = "512332479"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_28 = "2568809510"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_28 = "2281100547"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_28 = "2264240508"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_28 = "2281109368"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_29 = "2419296611"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_29 = "4049879119"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_29 = "4033297725"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_29 = "4049886009"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_30 = "2676977056"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_30 = "1523688946"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_30 = "1540545022"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_30 = "1523695610"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_31 = "56750561"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_31 = "3292477645"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_31 = "3309061567"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_31 = "3292472251"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_32 = "3249197414"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_32 = "766285194"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_32 = "749727296"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_32 = "766281796"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A1_33 = "1056216116"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A2_33 = "2535060987"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A3_33 = "2518321665"
  • In HKEY_CURRENT_USER\Software\Aasppapmmxkvs
    • A4_33 = "2535058437"

Step 3

Scan your computer with your Trend Micro product to delete files detected as TrojanSpy.Win32.CLIPBANKER.BF. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check the following Trend Micro Support pages for more information:


Did this description help? Tell us how we did.