Trojan.Win32.Copak.nhkl removal guide

The Trojan.Win32.Copak.nhkl is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.nhkl virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.nhkl?

File Info:
name: 143F5554258A5DC4825F.mlw
path: /opt/CAPEv2/storage/binaries/7c74845389027e9247138e1403dd1c17d37ee69545beb31e79825e69d15616e5
crc32: F0A6D6CD
md5: 143f5554258a5dc4825f738ae07ae139
sha1: 6151cee51496fa9fd715a9ffe2f1bcfe5ca712d2
sha256: 7c74845389027e9247138e1403dd1c17d37ee69545beb31e79825e69d15616e5
sha512: efaa92303fd6c104d5b8bc664c86c445161a391548a67637f3043abb376e6db922f93fcd1d8bb8c2df2946141d89bcc3984a6ec9c391275adac0bbcb2d843434
ssdeep: 3072:i1cTBGqzj5VzYu5j4io9cml4PizUICjVq54C0QZh/3D49tmE:i18uu58iGX5haVqTD+IE
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T154F3DF791A6DB043F9177A3E434B41B737F8B743CCA69897EA0C51E3401206797EA9B8
sha3_384: 1bd0ee466b4060a2a2fa7978b0ab85e083fa5702df388ba24fa80996d6114cba6cc64568ab8cee5b28c2d7df7d1dbc25
ep_bytes: 6818f2afff5b81c238a7f04668d88540
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.nhkl also known as:

How to remove Trojan.Win32.Copak.nhkl?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.