What is “Trojan.Win32.Copak.ndpg”?

The Trojan.Win32.Copak.ndpg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.ndpg virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location

How to determine Trojan.Win32.Copak.ndpg?

File Info:
name: 4684052AFF4205CCDD7E.mlw
path: /opt/CAPEv2/storage/binaries/de6d68c733d72989624015ad0bf41415b0d88a49c57558436458eb9ae81286e4
crc32: 4364EE06
md5: 4684052aff4205ccdd7e7246d931e66b
sha1: 949f250e118517b091e387543b7fae64deb3faff
sha256: de6d68c733d72989624015ad0bf41415b0d88a49c57558436458eb9ae81286e4
sha512: e190475e673816676f3a026984f7349799df0c0bf4b86a57e1c0b0cfd8254a8c7c3b26bc46b9f6d3833be1828e0d17b4ef6482060396234e65bd08b8f602cc19
ssdeep: 1536:Xw4nljr2kt5E/8mdysZXVlDCjnA8BIjHFJ2cjm1BftHqm75VXkCjXOR:A4nl/Zt5E/MsZXVliYLFk4ex751kCjXe
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D383CF0C8E320A22E1A5D6F4EEA1AC32DF3C2CF1F513D0B4F67B57C928054D752A6896
sha3_384: cbfd8549105fc1f6e833fd51afb1f99fbe4b1546def8f831d634872d7d805af069b4e2bc9345df75bf371dfeda40f30e
ep_bytes: ba7c5a8fce68d8854000680010400083
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.ndpg also known as:

How to remove Trojan.Win32.Copak.ndpg?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.