Trojan.Win32.Copak.lykh malicious file

The Trojan.Win32.Copak.lykh is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.lykh virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.lykh?

File Info:
name: 82F4AFF222389A72AC79.mlw
path: /opt/CAPEv2/storage/binaries/a65594c94a2c43f064b274cf5d3f518ce72336bf0f156982970c8695f6789f0e
crc32: B6C05D17
md5: 82f4aff222389a72ac79df7e6e87c6d3
sha1: c4cc346da2b7d18faa0a0c98b9ccbb1f34857a07
sha256: a65594c94a2c43f064b274cf5d3f518ce72336bf0f156982970c8695f6789f0e
sha512: a9a92ede15f70f84cd8e52d1240e336edc7f724f01fff761ddede5ebae9dabf34f9cae5544f621ff516502a3f26d3b0b689b5baf47c39c5772571fd6d6937438
ssdeep: 3072:jr0MRheZCbOOInNPm2gGjWsp3IB2eyi7IVJVw/4hJQUWBupOJdLRuUbEx9VqhiAw:8QENu2gGyshI4Bi8Vs4D0ZdLR6Vq8ArE
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T183F3CF19C903ECB1E3D2FCB66BB41347F4AE11A2B9E8564B9AF5515CB15138D12B8F30
sha3_384: b3496ab4ad0ef4ee50000dcc67d5c78e419996e25260955e669ea23f973e93c6e7dc913e3d38b89ca3be3bb2c015be79
ep_bytes: 6875a886f28b142483c40429cf29f783
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.lykh also known as:

How to remove Trojan.Win32.Copak.lykh?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.