Trojan

Should I remove “Trojan.Win32.Copak.abofk”?

Malware Removal

The Trojan.Win32.Copak.abofk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.abofk virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Deletes executed files from disk
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Copak.abofk?


File Info:

name: 9E8D282D123F776987E2.mlw
path: /opt/CAPEv2/storage/binaries/bdc44f0ea8ce9e1e5202eb4054d99ea8ee980ed5d6f0fca806c7324871a6fb8d
crc32: 4EA27BEA
md5: 9e8d282d123f776987e290f5c7e3f261
sha1: f345d2952916612a9a241701713cffccfba820ad
sha256: bdc44f0ea8ce9e1e5202eb4054d99ea8ee980ed5d6f0fca806c7324871a6fb8d
sha512: ef49d80050effbe28fd1cd809c91affcea53ce35de0ef2750f06bed7bdfbebfc4fa70d1c21410a8001b8e5ec513af537ed62257c1d9b052a80d478128b12e2c4
ssdeep: 98304:+cjlKdeshTWROV8qtx9aYhTWRyKP09fZDhTd:tlKdeskROV8QaYkRyKPOH
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1A246E04D13661A47C827273BEC1EDB7F80426DBC7AA3D6B9708135AFB9217C89446B70
sha3_384: c2768772fbca0a7cc944d12b2c6163144c812ff815572d43eb5255d3c799c0f5cfa805df9c159ab4689b3a2e5d7cb47d
ep_bytes: 051d7ef25574fa755095f3e4d2df9b5e
timestamp: 1975-06-24 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.abofk also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader45.58027
MicroWorld-eScanGen:Variant.Lazy.317678
ClamAVWin.Packed.Razy-9785185-0
FireEyeGeneric.mg.9e8d282d123f7769
McAfeePacked-FJB!9E8D282D123F
MalwarebytesCrypt.Trojan.MSIL.DDS
VIPREGen:Variant.Lazy.317678
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Glupteba.b77fe6bf
K7GWTrojan ( 005a45ef1 )
K7AntiVirusTrojan ( 005a45ef1 )
BitDefenderThetaGen:NN.ZexaF.36250.@@Z@aSJ4gId
CyrenW32/Copak.E.gen!Eldorado
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Kryptik_AGen.BGV
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Copak.abofk
BitDefenderGen:Variant.Lazy.317678
NANO-AntivirusTrojan.Win32.PackedDownloader.ijxqni
AvastWin32:RATX-gen [Trj]
TencentTrojan.Win32.Selfmod.ka
TACHYONTrojan/W32.Selfmod
EmsisoftGen:Variant.Lazy.317678 (B)
F-SecureTrojan.TR/Kryptik.wqxru
ZillyaTrojan.Kryptik.Win32.2065888
TrendMicroTROJ_GEN.R03BC0DFB23
McAfee-GW-EditionBehavesLike.Win32.Dropper.tc
SophosTroj/Agent-BFEY
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.11YPVZ
AviraTR/Kryptik.wqxru
Antiy-AVLTrojan/Win32.Kryptik.GIFY
XcitiumTrojWare.Win32.Kryptik.TLS@812zm8
ArcabitTrojan.Lazy.D4D8EE
ViRobotTrojan.Win.Z.Lazy.5570561.RT
ZoneAlarmTrojan.Win32.Copak.abofk
MicrosoftTrojan:Win32/Glupteba.MT!MTB
GoogleDetected
AhnLab-V3Packed/Win.Generic.R565453
VBA32Trojan.Copak
ALYacGen:Variant.Lazy.317678
MAXmalware (ai score=82)
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03BC0DFB23
RisingTrojan.Kryptik!1.B34D (CLASSIC)
YandexTrojan.Redcap!zbi6EFdgH7I
IkarusWin32.Outbreak
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Kryptik.GIFQ!tr
AVGWin32:RATX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Trojan.Win32.Copak.abofk?

Trojan.Win32.Copak.abofk removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment