How to remove “Trojan.Win32.Copak.lemb”?

The Trojan.Win32.Copak.lemb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.lemb virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location

How to determine Trojan.Win32.Copak.lemb?

File Info:
name: 3D777D9A6469602540B1.mlw
path: /opt/CAPEv2/storage/binaries/a130d2b1119482c4a6283f90a365efdbfe7611bcb57246a04964d52c23e11eba
crc32: C81E1054
md5: 3d777d9a6469602540b1491eccf36f4e
sha1: 54e6f6fb908369d5783509f5eac385a2a0db73e3
sha256: a130d2b1119482c4a6283f90a365efdbfe7611bcb57246a04964d52c23e11eba
sha512: 0b5b2496a2c9efa4ab031486c5a72aaf6585968f0fdbc1228e3f2d6353a032c6c29672cc57d08cc0304f7a71f0f3732e0ffa2adc7115a2272d86c8faf34c7f2a
ssdeep: 3072:8rO6zL1bH6afnmeyTl+dqnTiJ37Ry9RP++IEdqjqDZRYgqrJRt5c:SO6zLzPkWqnTiJ3Nmhg3PQ
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1C3F3CF5166D7506ADC217832A051ADE44ABDDC867C07F6EB9AE813CA07DA2DDCB31CF0
sha3_384: 599ad1723fb1955386134ab4336fe52cc0db2d1932bcd7a613b13d71e190c01af0ab539623c01c20c75e4293f29a9160
ep_bytes: ba53a9bcae21db68d88540004f680010
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.lemb also known as:

How to remove Trojan.Win32.Copak.lemb?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.