Trojan

Trojan.Win32.Copak.livl removal instruction

Malware Removal

The Trojan.Win32.Copak.livl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.livl virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Win32.Copak.livl?


File Info:

name: B1DB343373741250F521.mlw
path: /opt/CAPEv2/storage/binaries/5edeb52d7d9a723ceb30ea991355789bc57dd85de7ffd19ec33048a72394aad8
crc32: 84047FCC
md5: b1db343373741250f521fff7393af50a
sha1: d3ca89d590bef9ce5068db5318579be69dc59230
sha256: 5edeb52d7d9a723ceb30ea991355789bc57dd85de7ffd19ec33048a72394aad8
sha512: 3f1e3992566c30d8b44ee5ecaa4241d97c8826ca4559da43f4dc6f539a3b7d75933c79be0d4ef4633e108d8aa4f915c6d6d0304057d6827a62dcc18a18b125d8
ssdeep: 24576:H7vhjfW3zyg1C9LpISczj/FS+cyg1C9LpIP:HrhzGzyg89VISY/4yg89VIP
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14805011CB918E82FD7CBDCF090684147CAA471EEA6B34349C3ED51BA0E6B2775936631
sha3_384: 12293a89272bc5e19f1b4053065b8504cb0a1e7fcee7e176608171f2a682204fd2987600c36eed7840421aff6f65f8be
ep_bytes: b9e554b15b09db68d885400021c301db
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.livl also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.870640
ALYacGen:Variant.Razy.870640
ZillyaTrojan.Injector.Win32.1328002
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0058e60a1 )
K7GWTrojan ( 0058e60a1 )
Cybereasonmalicious.373741
BitDefenderThetaGen:NN.ZexaF.36348.YuZ@aSwc1te
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
ClamAVWin.Malware.Razy-9928638-0
KasperskyTrojan.Win32.Copak.livl
BitDefenderGen:Variant.Razy.870640
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.Copak.wc
EmsisoftGen:Variant.Razy.870640 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.Siggen14.7487
VIPREGen:Variant.Razy.870640
McAfee-GW-EditionBehavesLike.Win32.Glupteba.cc
Trapminemalicious.moderate.ml.score
FireEyeGeneric.mg.b1db343373741250
SophosTroj/Agent-BGOS
IkarusTrojan.Win32.Glupteba
GDataGen:Variant.Razy.870640
JiangminTrojan.Copak.bomx
GoogleDetected
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.Glupteba
ArcabitTrojan.Razy.DD48F0
ZoneAlarmHEUR:Trojan.Win32.Copak.pef
MicrosoftTrojan:Win32/Glupteba.DB!MTB
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
Acronissuspicious
McAfeeGlupteba-FTSD!B1DB34337374
MAXmalware (ai score=87)
VBA32BScope.Trojan.Wacatac
Cylanceunsafe
RisingTrojan.Injector!1.CD26 (CLASSIC)
YandexTrojan.Copak!Ig3jVFkaZK4
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/GenKryptik.CTNW!tr
AVGWin32:Evo-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan.Win32.Copak.livl?

Trojan.Win32.Copak.livl removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment