Trojan

Trojan.Win32.Copak.hyrj removal tips

Malware Removal

The Trojan.Win32.Copak.hyrj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.hyrj virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Performs some HTTP requests
  • The executable is compressed using UPX
  • Deletes its original binary from disk
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Creates a slightly modified copy of itself

Related domains:

cutit.org
q.gs
usfinf.net

How to determine Trojan.Win32.Copak.hyrj?


File Info:

crc32: 3817F759
md5: 4897f94cfeab59f41f5497ec22954002
name: 4897F94CFEAB59F41F5497EC22954002.mlw
sha1: c8bf566fee32ac48d44e6199a5feb925285d60b7
sha256: 239e1efa974a2653405dd23d5ecbdde8ded536e5b40593783ff9a26d50a03bb1
sha512: 5bbbe8e44843196ef07e5fdc557c42b3a7116ce6f1aefda44752073f0403e6e3a3f3fb7f8e2eeef4f8c73b1a45f88990f8e228710811c525a38592d706dfc264
ssdeep: 6144:UxGZHc4L6DHLjxnffAKo4Tu+wIuo7FPtJ6796gTHd7BSNo0QTu+wIuo7F8:UAZHc4L6D/xnY66I57FPtmUgTHdP6I52
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Trojan.Win32.Copak.hyrj also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43250
ALYacGen:Variant.Razy.866955
CylanceUnsafe
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
K7GWTrojan ( 0057cf3b1 )
K7AntiVirusTrojan ( 0057cf3b1 )
CyrenW32/Kryptik.DZR.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Copak.hyrj
BitDefenderGen:Variant.Razy.866955
ViRobotTrojan.Win32.Z.Razy.391280.I
MicroWorld-eScanGen:Variant.Razy.866955
TencentWin32.Trojan.Copak.Pegd
Ad-AwareGen:Variant.Razy.866955
SophosMal/Generic-R
ComodoPacked.Win32.MUPX.Gen@24tbus
BitDefenderThetaGen:NN.ZexaF.34170.xmZ@aeBy@@e
McAfee-GW-EditionBehavesLike.Win32.Generic.fm
FireEyeGeneric.mg.4897f94cfeab59f4
EmsisoftGen:Variant.Razy.866955 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Copak.isv
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Generic.ASMalwS.331717E
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataGen:Variant.Razy.866955
McAfeeGenericRXOH-HZ!4897F94CFEAB
MAXmalware (ai score=82)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Crypt
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0PJ121
RisingTrojan.Kryptik!1.D238 (CLASSIC)
YandexTrojan.Injector!ClkhNuhAFd8
IkarusTrojan.Win32.Injector
FortinetW32/Kryptik.EAHK!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Trojan.Win32.Copak.hyrj?

Trojan.Win32.Copak.hyrj removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment