Trojan

Trojan.Win32.Copak.mbzn removal instruction

Malware Removal

The Trojan.Win32.Copak.mbzn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.mbzn virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Win32.Copak.mbzn?


File Info:

name: 61B3DA9043DD91811EC7.mlw
path: /opt/CAPEv2/storage/binaries/ce5532d5aab348f104f0746a8e6d2ad14117a45c02b5c156ccc516276293590e
crc32: 0CEC4C9A
md5: 61b3da9043dd91811ec78554af1502ac
sha1: 89064c61b1306fa8bf990d05174ac539a566012b
sha256: ce5532d5aab348f104f0746a8e6d2ad14117a45c02b5c156ccc516276293590e
sha512: c616f1e426d6f4ffa7dcdb7c63eeb2ebfaf9eb2a151c8070bff5578b5e5a8885412602f36cb1dc4d244b754f20fbeddcd6ba3ef9365e4d651a36032792351396
ssdeep: 3072:OvRriVNpqWAPE5dwrE6osu4Fq0MWgj5gVBJbsxwrhw8xTuTFHgN9jww48wh7zgZ:OpuVNEWqBo6oGFUWGeUeSEAxEb14gZ
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AB1402D347D66B04F56453B924AE59638AF8A1BF2D4F802EFDD00AF8984DB41AD84FD0
sha3_384: 9e8958da8b0eebe52e77c76d54c5904bec72343f13360e6c80cb9000f0d9b0aa9d59b4390b77a87e60061df5f03a76c2
ep_bytes: ba00d2d51f01fe68d8854000578b1c24
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.mbzn also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
FireEyeGeneric.mg.61b3da9043dd9181
McAfeeArtemis!61B3DA9043DD
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00577ea11 )
AlibabaTrojan:Win32/Copak.1c39d107
K7GWTrojan ( 00577ea11 )
CrowdStrikewin/malicious_confidence_90% (W)
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
AvastWin32:Trojan-gen
KasperskyTrojan.Win32.Copak.mbzn
BitDefenderGen:Trojan.Heur.muW@ITwc1te
MicroWorld-eScanGen:Trojan.Heur.muW@ITwc1te
TencentMalware.Win32.Gencirc.10cfaa91
Ad-AwareGen:Trojan.Heur.muW@ITwc1te
DrWebTrojan.Siggen13.63749
TrendMicroTROJ_GEN.R002C0DA622
GDataGen:Trojan.Heur.muW@ITwc1te
AviraTR/Crypt.XPACK.Gen
ArcabitTrojan.Heur.EDC45A
MicrosoftTrojan:Win32/Glupteba.DB!MTB
AhnLab-V3Malware/Win32.RL_Generic.R293305
BitDefenderThetaAI:Packer.C46C008F1B
ALYacGen:Trojan.Heur.muW@ITwc1te
MAXmalware (ai score=87)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Crypt
TrendMicro-HouseCallTROJ_GEN.R002C0DA622
RisingTrojan.Injector!1.CD26 (CLOUD)
YandexTrojan.Copak!8EX9anlUe/s
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.CTNW!tr
AVGWin32:Trojan-gen
Cybereasonmalicious.043dd9

How to remove Trojan.Win32.Copak.mbzn?

Trojan.Win32.Copak.mbzn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment