Trojan.Win32.Copak.mcwq removal instruction

The Trojan.Win32.Copak.mcwq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.mcwq virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.mcwq?

File Info:
name: 99100FB33A727EE286BB.mlw
path: /opt/CAPEv2/storage/binaries/c65aeec8271d3bfc0a44c07a304717a2eb38478a21b1dc9bd20ff4fe87730744
crc32: 4BE289A1
md5: 99100fb33a727ee286bb232f3d7840de
sha1: 6cc7ae00067de8cc3fb22221fc3c82bd819e4f9c
sha256: c65aeec8271d3bfc0a44c07a304717a2eb38478a21b1dc9bd20ff4fe87730744
sha512: b003013d823a118799c048bff77ddeccf0ed769ca55bdb7b231d12cd69514e90b6cca778e4514b12520699f02a9200f50d5887c7c0ee621cc90c7fdcb2e0c270
ssdeep: 6144:gKiFDlELALRQPw6tuOv+xHSvMI7LFsZEKiyFJhv+xHSvMI7LFa:ghFDuLAao6MOv+RS/Joiqhv+RS/Ja
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10A64DF0988BAFC25DCDA3FBB52484C0C2A79EFB36942B7FEDB3C16896040975C1D5568
sha3_384: 03bcb62c3a5a634b30fa691cdc3c7481ed065c950de2676b0889d8c84f940efff880834355085cc4b1aee685202484eb
ep_bytes: bfd61e5e3601db68d885400068001040
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.mcwq also known as:

How to remove Trojan.Win32.Copak.mcwq?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.