What is “Trojan.Win32.Copak.kylx”?

The Trojan.Win32.Copak.kylx is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.kylx virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.kylx?

File Info:
name: 471D3CC211E60D9348BF.mlw
path: /opt/CAPEv2/storage/binaries/e2894085a64bdd7b9d1fd3b2aa74d9ca44adf268a58e053dce8aac2fd4729939
crc32: 845F65BC
md5: 471d3cc211e60d9348bf56fe139ff5d2
sha1: 8832b92712031e07503eac8db68cede07ca27b4b
sha256: e2894085a64bdd7b9d1fd3b2aa74d9ca44adf268a58e053dce8aac2fd4729939
sha512: 6f449186e3ca93113d3a00e183afd68fe2a788e93c5461c50c51701f71de3185987948493236d84f5bfde7b432417fafd0bc4d60a6dc20353154d9c2c89523ed
ssdeep: 49152:1uVn9RKvOh7YKrGDsOO9W12jRIqMXxfDOG5/7/irfGt2LZJrHosJhPxp:KRh889OgRIrp7KrfGtlch5p
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T147B5335BCD783B66C878427A0268E6F579BE3C066691C88C5AD3BD501A32E3D3BC553C
sha3_384: d98c5f3573ff33b0d6e95027f11d1f9807c8a8fa57c5b7ef19bc4a9d49226a3c360d548bbcbd6231593e3bf4f290c6f7
ep_bytes: ba0000000056578b3c2483c40401ff09
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.kylx also known as:

How to remove Trojan.Win32.Copak.kylx?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.