About “Trojan.Win32.Copak.mvql” infection

The Trojan.Win32.Copak.mvql is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.mvql virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location

How to determine Trojan.Win32.Copak.mvql?

File Info:
name: AA272E07509FBAD91309.mlw
path: /opt/CAPEv2/storage/binaries/13cc4e80a9ca2658c985ae974118fb701e38930f1b652c59925a872b2e250a3d
crc32: 631A2AAD
md5: aa272e07509fbad91309e95ee68d6aac
sha1: 441d37d2cbd2b25ab8e64ac8972c119439ef60f6
sha256: 13cc4e80a9ca2658c985ae974118fb701e38930f1b652c59925a872b2e250a3d
sha512: b99d360513218833381d1e1f27f1504fb38db0d8e3e1db030e6e71b95d5e59b2c883e72b3301d2aed8c0b72949492f39f30945e90f4613ddc5612bb706ff614f
ssdeep: 12288:xyORMyBDbEWKSbLEVaW43RhEWKSWE0l5QuTGEWKSbLEVaW43RhEWKSh:xyORMyBDAWBcVR43RuWB0lGuTxWBcVR4
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T11BD4DF0EF09B8841D34394BCB93218E2397DB5620887E776DC21571AFC67A9047AB9FD
sha3_384: 78e4b98762458de17960f58a2b78cf87c8e16ae709cf0da54484d1abf71402029c4e58b0060cc5f89c604b6ca449953a
ep_bytes: 681f92e63a5921fa68d8854000680010
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.mvql also known as:

How to remove Trojan.Win32.Copak.mvql?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.