Trojan.Win32.Copak.aaiyy removal

The Trojan.Win32.Copak.aaiyy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.aaiyy virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Creates a copy of itself
• Deletes executed files from disk
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Copak.aaiyy?

File Info:
name: FC8C270467018FBB7CE5.mlw
path: /opt/CAPEv2/storage/binaries/faf0ebf3eb0d1b72c0e2ea005dd83a788a932fed0748ae06ff12797f04fc6b75
crc32: 1E93F322
md5: fc8c270467018fbb7ce5b1da8fe592f5
sha1: 5af5bf9100f7cd191db96db226435291a4c1c4a0
sha256: faf0ebf3eb0d1b72c0e2ea005dd83a788a932fed0748ae06ff12797f04fc6b75
sha512: 6e52730cd7ceebce89103a3aedc182461d1eaa2cec7cecf711015fbc05d6ed84612f005e13e8529eecb15c2d2f6e6fb37925589d48c24a63d04e4bfb259e9932
ssdeep: 6144:JdeRdXZOPAmf3LDj3xvfHjTCEvY5BQwKSql4fejxkrAWxeOwvfwEBN+j:C8oK3xD+EvoKlSql4ejAAWxe1X7BMj
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F6646C2FBE45077ACDC102732A0B8CC7E6299738E36A85E03468805D126FE7DD67B6D5
sha3_384: 69dfe89c98f6fb8199a0f7fa0883d4f07900ae4cbc5fd0d45bce975cfea19e64472d0e0fbdbe87569dc6c1badf9440a2
ep_bytes: 1e2bf7cc4e42734b4ba37ada59e11260
timestamp: 1974-02-09 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.aaiyy also known as:

How to remove Trojan.Win32.Copak.aaiyy?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.