Trojan.Win32.Copak.ntag information

The Trojan.Win32.Copak.ntag is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.ntag virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.ntag?

File Info:
name: 4ECE6854C44681BFF7D2.mlw
path: /opt/CAPEv2/storage/binaries/162773b9cf06ca50f97883cf8524fd0978e437748c34552a4a97f863fd322c95
crc32: FA0A4CC7
md5: 4ece6854c44681bff7d20ae5208b937e
sha1: c09d8c7d9aeebffdb18bb197c6ee47e5d69f4bd9
sha256: 162773b9cf06ca50f97883cf8524fd0978e437748c34552a4a97f863fd322c95
sha512: 03501079e6c5484b55a3798c8fa246b2c97792deb5d246e6c90b5c7e61ed96a922034ad291e4e0a5fd5f4fd7e4053ffb484f7b64aa8b02d01f4a74bd018ae0ea
ssdeep: 3072:9KxqPetDR+TO7/Q/BnhPsikl5IlJFzc4i8CyXGn/xGQoK4825I:94qk4TyI/BnNPkKJFQi1XGnAZ3+
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T127F3CF2E5BFFAC50C8FBC53AA8C394B00E6F1EBD266319D6CA241BD011985D10ACE75D
sha3_384: d27e968ccadf3162815091a2907e3d6645af1ff48f616c9f36589ceaa0c146fd44b5e6dc638892615004f8f2ed0566c2
ep_bytes: b9f4e35ae081c6748d03c468d8854000
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.ntag also known as:

How to remove Trojan.Win32.Copak.ntag?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.