Trojan

Trojan.Win32.Copak.mrfq removal

Malware Removal

The Trojan.Win32.Copak.mrfq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.mrfq virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan.Win32.Copak.mrfq?


File Info:

name: 6541FA06E14560AE6A26.mlw
path: /opt/CAPEv2/storage/binaries/1717b8d427159bbb5cf607c04cd3c5437cde38a25b562eb7720174c8509762e3
crc32: CF735CCD
md5: 6541fa06e14560ae6a26e78eb324f9d0
sha1: 44b9dcb24cd9131f70601dc0ba6aa203a62b8f89
sha256: 1717b8d427159bbb5cf607c04cd3c5437cde38a25b562eb7720174c8509762e3
sha512: 80531ec1323aec76edea9644ed921418eb9f1fd771b18322f09627cfcf003bc6b652ae09b9274c090ecaf306149b82cb64d97ff3de6e4143db576c188e46586d
ssdeep: 6144:PjhedQdvlaU/J4yQEPKm5+u9OpyUlMkDkqu4dE6X2f:rhedC3/JZ/PKm5+SOpyUaQjdE6X+
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1B01401F64928DD8AE2DA14BB504EF092BD34AADB2F1777E7680CD840994F15E2F124F4
sha3_384: bb21f930c1bc52100ac8b7bdcdce43de08d4a9dc39366a2a2c3d617226c093753ebcdc3a6c16edfb2c23df84137e346f
ep_bytes: be30c3890901c001c183ec04c70424d8
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.mrfq also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
DrWebTrojan.Siggen14.7487
MicroWorld-eScanGen:Trojan.Heur.muW@ITwc1te
FireEyeGeneric.mg.6541fa06e14560ae
McAfeeArtemis!6541FA06E145
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00577ea11 )
AlibabaTrojan:Win32/Copak.04ff4615
K7GWTrojan ( 00577ea11 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaAI:Packer.C46C008F1B
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
TrendMicro-HouseCallTROJ_GEN.R002C0DB322
Paloaltogeneric.ml
KasperskyTrojan.Win32.Copak.mrfq
BitDefenderGen:Trojan.Heur.muW@ITwc1te
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Trojan-gen
TencentTrojan.Win32.Copak.wc
EmsisoftGen:Trojan.Heur.muW@ITwc1te (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
TrendMicroTROJ_GEN.R002C0DB322
McAfee-GW-EditionBehavesLike.Win32.RAHack.dc
SophosTroj/Agent-BGOS
IkarusTrojan.Win32.Injector
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.Glupteba
MicrosoftTrojan:Win32/Glupteba.DB!MTB
ViRobotTrojan.Win32.Z.Injector.205312.TYD
ZoneAlarmTrojan.Win32.Copak.mrfq
GDataGen:Trojan.Heur.muW@ITwc1te
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
VBA32BScope.Trojan.Wacatac
ALYacGen:Trojan.Heur.muW@ITwc1te
MAXmalware (ai score=88)
MalwarebytesTrojan.Injector
APEXMalicious
RisingTrojan.Injector!1.CD26 (CLOUD)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GenKryptik.CTNW!tr
AVGWin32:Trojan-gen
Cybereasonmalicious.6e1456

How to remove Trojan.Win32.Copak.mrfq?

Trojan.Win32.Copak.mrfq removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment