Trojan.Win32.Copak.moua removal guide

The Trojan.Win32.Copak.moua is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.moua virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.moua?

File Info:
name: 29C0C8DAE94F9E1B2FF7.mlw
path: /opt/CAPEv2/storage/binaries/a6e2d014b12632db2e6ebeb67bbfb58278af31e78cf38180ca2cd7b22affba4c
crc32: B0A86C3D
md5: 29c0c8dae94f9e1b2ff7a2f4713147aa
sha1: 4b893681f03536885a4b6527c7fa0cf5e47abf6c
sha256: a6e2d014b12632db2e6ebeb67bbfb58278af31e78cf38180ca2cd7b22affba4c
sha512: b9277220e1c8b5af341f07beb35403cedab2234b307a304082d13d84922601b30a42eead01b8de05f0b375bc523b310ac017235aa14e8dc84195e804b95c8747
ssdeep: 1536:MuZJZ0ES+JstpfUrjCukAM+NHyLmB4ak90i9wXcRQIoKpdOyCinBpWzrkc:MwZMuypf6jCukNBWkwMR9OJESH1
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14383AE7C606A4FCED5AB5DFAFF623D888A7633F76A95282F0BB2710005770542748D29
sha3_384: b1f7cd787526c11c6d5ecaffe5279a1eb049aa8f53c9c95fb4a648f05e506a1fba4ab120d276043eacd5262f4abfc548
ep_bytes: ba0f1b73db4383ec04c70424d8854000
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.moua also known as:

How to remove Trojan.Win32.Copak.moua?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.