How to remove “Trojan.Win32.Copak.kxii”?

The Trojan.Win32.Copak.kxii is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Copak.kxii virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Win32.Copak.kxii?


File Info:
name: E68A2FA2CEA3EAE2B52A.mlw
path: /opt/CAPEv2/storage/binaries/de64e04ac01550dc249d66a6453d4088c8b095f8983285004954e6e66b6c1a88
crc32: E206F970
md5: e68a2fa2cea3eae2b52a1d84fe37a0c5
sha1: 1029c4e529c78a35c79f1754c2df23fb496b98c7
sha256: de64e04ac01550dc249d66a6453d4088c8b095f8983285004954e6e66b6c1a88
sha512: 99f2a9fb6baf42097facbd7538bfbbd6d3cdf18d0250f157010110b49bb1f001b29040acca4522f0264f0f4194243da4ff75e4f475a1463294c86f0db973dffe
ssdeep: 1536:9J5qF/Y5R8ljhbgmBvTq04PsmFlsxxoFLA8+i2wHPmyZLn/tH+iIA8WnH:JH8dhbFO1UKLT+Jwvr1d+t9Q
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1B783C0C14623EC69D3453470DC2C8D8B19D94B6E0F085BEB124EB9F520F6A7E6AB2DD4
sha3_384: 75ddcd313bb7543eafba6bcb131b36cdd42358bf0f913168dce8b8b2134310471ea6a2ddee88712f4e816f2cb361749b
ep_bytes: bb0000000083ec0489142481c04fd686
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.kxii also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Copak.4!c
MicroWorld-eScan	Gen:Trojan.Heur.fuW@IHo3wXi
FireEye	Generic.mg.e68a2fa2cea3eae2
ALYac	Gen:Trojan.Heur.fuW@IHo3wXi
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 00577ea11 )
BitDefender	Gen:Trojan.Heur.fuW@IHo3wXi
K7GW	Trojan ( 00577ea11 )
Cybereason	malicious.2cea3e
BitDefenderTheta	AI:Packer.4C54403D1B
Cyren	W32/Kryptik.ECM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.CTNW
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Copak.kxii
Alibaba	Trojan:Win32/Copak.2f35cb38
NANO-Antivirus	Virus.Win32.Gen.ccmw
ViRobot	Trojan.Win32.Z.Crypt.84480.SJS
Tencent	Win32.Trojan.Copak.Akow
Ad-Aware	Gen:Trojan.Heur.fuW@IHo3wXi
Emsisoft	Gen:Trojan.Heur.fuW@IHo3wXi (B)
McAfee-GW-Edition	BehavesLike.Win32.Glupteba.mc
Sophos	ML/PE-A + Troj/Agent-BGOS
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Copak.bfek
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=88)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Trojan.Heur.fuW@IHo3wXi
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R293305
Acronis	suspicious
McAfee	Glupteba-FTSD!E68A2FA2CEA3
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Trojan.Crypt
Rising	Trojan.Kryptik!1.BF57 (CLASSIC)
Ikarus	Trojan.Win32.Crypt
Fortinet	W32/Kryptik.ECM!tr
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Trojan.Win32.Copak.kxii?

Trojan.Win32.Copak.kxii removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X