Trojan

Trojan.Win32.Chapak.exkk removal tips

Malware Removal

The Trojan.Win32.Chapak.exkk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Chapak.exkk virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Expresses interest in specific running processes
  • Unconventionial language used in binary resources: Norwegian (Nynorsk)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Trojan.Win32.Chapak.exkk?


File Info:

crc32: 4D96CA6F
md5: 19ce663e269d9ec9be127f8fd2b4679b
name: 19CE663E269D9EC9BE127F8FD2B4679B.mlw
sha1: 86827c737c0e5a4d408c6a87835d1335e55ced12
sha256: 93bf9a33ed9296ce932e515920d8601fb6a274ab29cb42b47f24622d6cbc15df
sha512: 231cb957a569d18a50ec0f0c45d4458b4010d7317bc095e6d5dc7ba0dd29796632dcda0d4d968bd7ef4a48622d1a60220b6ac094c3de6ef97650c9afc20a2657
ssdeep: 98304:PTTiCZ1HHcHcOfe5qf5JQLjIKSBfrVybFvfjMisquvutXuG5pCj2L+TSbkN+Had:PT2fyCr6lWcL+P+K2WPx6ypL
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

InternalName: triwilbifor.acs
FileVersion: 6.26.361
Copyright: Copyrighz (C) 2020, vodkafuck
ProductVersion: 1.0.15
TranslationUsa: 0x0273 0x053a

Trojan.Win32.Chapak.exkk also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.36044380
FireEyeGeneric.mg.19ce663e269d9ec9
ALYacTrojan.GenericKD.36044380
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Malicious.4!c
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.36044380
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.e269d9
BitDefenderThetaGen:NN.ZexaF.34760.@pKfaG2SZWiG
CyrenW32/Trojan.CJXK-1791
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HIOC
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
KasperskyTrojan.Win32.Chapak.exkk
AlibabaTrojan:Win32/Chapak.e43aa80d
ViRobotTrojan.Win32.Z.Glupteba.4477440
RisingTrojan.Kryptik!8.8 (TFE:5:beSYtboWWOS)
Ad-AwareTrojan.GenericKD.36044380
SophosMal/Generic-S
ComodoMalware@#k7nbk77ltmyk
F-SecureTrojan.TR/AD.GoCloudnet.qciqr
DrWebTrojan.MulDrop16.5707
TrendMicroTROJ_GEN.R002C0DA521
McAfee-GW-EditionBehavesLike.Win32.Generic.rc
EmsisoftTrojan.GenericKD.36044380 (B)
IkarusTrojan.Win32.Krypt
AviraTR/AD.GoCloudnet.qciqr
MAXmalware (ai score=81)
MicrosoftTrojan:Win32/Glupteba.NW!MTB
GridinsoftTrojan.Win32.Packed.oa
ArcabitTrojan.Generic.D225FE5C
AhnLab-V3Malware/Win32.RL_Generic.R361868
ZoneAlarmTrojan.Win32.Chapak.exkk
GDataTrojan.GenericKD.36044380
CynetMalicious (score: 100)
Acronissuspicious
McAfeeGenericRXNG-YV!19CE663E269D
VBA32Trojan.Glupteba
MalwarebytesTrojan.MalPack.GS
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0DA521
TencentWin32.Trojan.Chapak.Eaxy
SentinelOneStatic AI – Malicious PE
FortinetW32/Kryptik.HIFA!tr
WebrootW32.Trojan.Gen
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.eea

How to remove Trojan.Win32.Chapak.exkk?

Trojan.Win32.Chapak.exkk removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment