Trojan

Trojan.Win32.Chapak.binr removal guide

Malware Removal

The Trojan.Win32.Chapak.binr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Chapak.binr virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Win32.Chapak.binr?


File Info:

crc32: 50EDFE2B
md5: d1cac05124e80a30d6ec7b4f505cbeed
name: D1CAC05124E80A30D6EC7B4F505CBEED.mlw
sha1: 8db4faab3f1f5f7d0915e88a8720e2cd3e66b808
sha256: 47149b4e5d1ef81ff8ec3754b857f55bc2ac5a5db5582ba9a05c28ba773aceaa
sha512: d1edc9818c620b838b850bb00fa9cb70de3b8fec7d351d07d06350ef03b9acf6a7b777cb5e05c199558ba68e1ee265d71871137a212b5a12591005a6da51e3b7
ssdeep: 6144:CYOC6JfuZDq73yK5aS/r3MToJd8boCor887Xd6:CYOC+fuZDQ55MoJd8kCeb7X
type: PE32 executable (GUI) Intel 80386 system file, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2017, tcgisadz
FileVersion: 1.3.6
ProductVersion: 1.0.4.11

Trojan.Win32.Chapak.binr also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 00543e471 )
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.26667
CynetMalicious (score: 100)
ALYacTrojan.GenericKDZ.51497
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Chapak.d202f759
K7GWTrojan ( 00543e471 )
Cybereasonmalicious.124e80
CyrenW32/Kryptik.NF.gen!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.GMPP
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
ClamAVWin.Packed.Azorult-7596348-0
KasperskyTrojan.Win32.Chapak.binr
BitDefenderTrojan.GenericKDZ.51497
NANO-AntivirusTrojan.Win32.Encoder.fkrejh
MicroWorld-eScanTrojan.GenericKDZ.51497
TencentWin32.Trojan.Chapak.Wrgk
Ad-AwareTrojan.GenericKDZ.51497
SophosMal/Generic-R + Mal/GandCrab-G
ComodoTrojWare.Win32.Ransom.Gandcrab.GC@7zlhhh
BitDefenderThetaGen:NN.ZexaF.34722.ru0@aax!Nhfi
TrendMicroTrojan.Win32.SODINOK.SM.hp
McAfee-GW-EditionBehavesLike.Win32.AdwareSEasy.dm
FireEyeGeneric.mg.d1cac05124e80a30
EmsisoftTrojan.GenericKDZ.51497 (B)
JiangminTrojan.PSW.Azorult.bd
AviraHEUR/AGEN.1107191
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/GandCrab.GD!MTB
GDataTrojan.GenericKDZ.51497
AhnLab-V3Trojan/Win32.Gandcrab.R243906
Acronissuspicious
McAfeeTrojan-FPST!D1CAC05124E8
MAXmalware (ai score=88)
VBA32BScope.Trojan.Vigorf
MalwarebytesTrojan.MalPack
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojan.Win32.SODINOK.SM.hp
RisingRansom.GandCrab!1.B51A (CLASSIC)
YandexTrojan.GenAsa!QKRB9P4Nhww
IkarusTrojan-Ransom.GandCrab
MaxSecureRansomeware.GandCrypt.Gen
FortinetW32/Kryptik.GNAQ!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.Win32.Chapak.binr?

Trojan.Win32.Chapak.binr removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment