Trojan.Win32.Copak.njmk information

The Trojan.Win32.Copak.njmk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.njmk virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.njmk?

File Info:
name: A694D12D8DD506643317.mlw
path: /opt/CAPEv2/storage/binaries/bec2bf770b873d2719d5c51ee35fb86b745b498d5600d67b3175675f40673db7
crc32: 6DA7C8F6
md5: a694d12d8dd5066433173552d6c2a591
sha1: 06d05c2980bfe1e060d2d089c93832473ffb086d
sha256: bec2bf770b873d2719d5c51ee35fb86b745b498d5600d67b3175675f40673db7
sha512: 7398896402f2ef0281faff3c797dde7e1ba7c7286edc0b6abacdc54e5254ed3d1834c1303c7d01f7d8624f2ab80359559c2a9b21b741b9fc294326aeaf87e475
ssdeep: 3072:vIl1VgQxR+ewWae6UZc4jSnnWY+NcxJ/4rtl8NXXJ+5s+erjSn2:vI/VgC+eww6UV4nWdi/4rtaJIsTr42
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T167049B2CE90726F5EAD19CBC98B1F9DF1FAD08F2A6B52BA84D4050B60364DFF9523450
sha3_384: 331f6e6675d54b85700d0b6d0f81bb455c9b8813844c5bdc07f2fa6db86607fde9416ac2e964bc9bd462920604207076
ep_bytes: bf8c80bcdf68d885400081eb35401483
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.njmk also known as:

How to remove Trojan.Win32.Copak.njmk?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.