Trojan

Trojan.Win32.Copak.lgsf removal tips

Malware Removal

The Trojan.Win32.Copak.lgsf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.lgsf virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Win32.Copak.lgsf?


File Info:

name: 1F61142EBC6D152A1686.mlw
path: /opt/CAPEv2/storage/binaries/a55ed1ad632a5d867e57d3aebbdd54aa620df375823149f38eebb9ad69e81927
crc32: B04E4C2B
md5: 1f61142ebc6d152a1686e55915de2c39
sha1: 6eb49c8dae9c939893df1126f2391592423277de
sha256: a55ed1ad632a5d867e57d3aebbdd54aa620df375823149f38eebb9ad69e81927
sha512: ddcfcbf68759aac0ba649cb03c44ef5c00d492bb7ad59f98056063593803e8aaf000133779fc6c4288415d1891d87de2e1b7b2cd8b751b32a59dd89d01584843
ssdeep: 12288:e8M7eu12JW4zdq1GPufZJ37WyL7GEJDG0NLlBymOh1tKGPufZJ37WyL70:e8yv2J01GPu/N7GoDl5Lym+KGPu/N70
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14D0501EA82268FDDDC1C0DFD9527B40CE98D6E6DA8216B9C4FC314C6855C16C09FAEE1
sha3_384: 24b9f81117a67092261fbe0b0da0138b563487020a7d507823c394bf8cd466106e6a4816878659c4ae5ad22adeac032c
ep_bytes: b8d00c91964181c10100000068d88540
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.lgsf also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Siggen14.7487
MicroWorld-eScanGen:Variant.Razy.870640
FireEyeGeneric.mg.1f61142ebc6d152a
CAT-QuickHealTrojan.Copak
ALYacGen:Variant.Razy.870640
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00577ea11 )
K7GWTrojan ( 00577ea11 )
Cybereasonmalicious.ebc6d1
BitDefenderThetaGen:NN.ZexaF.34114.YuZ@aSwc1te
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Copak.lgsf
BitDefenderGen:Variant.Razy.870640
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Trojan-gen
RisingTrojan.Injector!1.CD26 (RDMK:cmRtazqgiMjKxYhMIwoxAJu48mPs)
Ad-AwareGen:Variant.Razy.870640
SophosML/PE-A + Troj/Agent-BGOS
McAfee-GW-EditionBehavesLike.Win32.Glupteba.cc
EmsisoftGen:Variant.Razy.870640 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Razy.870640
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Generic.ASMalwS.33992DF
MicrosoftTrojan:Win32/Glupteba.DB!MTB
AhnLab-V3Malware/Win32.RL_Generic.R293305
McAfeeGenericRXGJ-XZ!39DF848FEBFC
MAXmalware (ai score=85)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Injector
TencentMalware.Win32.Gencirc.10cfb087
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/GenKryptik.CTNW!tr
AVGWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan.Win32.Copak.lgsf?

Trojan.Win32.Copak.lgsf removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment