Trojan

How to remove “Trojan.Win32.Copak.pqvp”?

Malware Removal

The Trojan.Win32.Copak.pqvp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.pqvp virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Deletes its original binary from disk
  • Created a process from a suspicious location
  • Creates a copy of itself

How to determine Trojan.Win32.Copak.pqvp?


File Info:

name: 735EFCAA19C2A862BD57.mlw
path: /opt/CAPEv2/storage/binaries/8302c5f51537239868f14eee579170cd09d2cd008096bfde2a65d61340e1fecc
crc32: 94B1615B
md5: 735efcaa19c2a862bd579b2428a4f020
sha1: 4d400c5a4da7b174061b1619e6492738f3b5146f
sha256: 8302c5f51537239868f14eee579170cd09d2cd008096bfde2a65d61340e1fecc
sha512: e519740883750db9c23b09eb2ffb94e3175192c804f1c6bbc3bb7baf9bd79b956a5a8adf63cbf11c19ef30422375172d74a2cd9315b3c36dd57c498062036b0c
ssdeep: 3072:KdWXkrX0yt0O6YaIr4VDRE28qzDZJk/+X6Lvu:KdbrXxax82TlJdX6ju
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T125E3DF9BA3611446EAFEF43A991245A35DBA41E2718D8F484FF3EE71F19064C32EB070
sha3_384: 5a51e4cf200f859dfb3431171a5be1af3782b949428bcb9221a2e533151a1af15497712ee2a070ef3ec49770f26b3923
ep_bytes: 83ec04c7042429b300fd8b0c2483c404
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.pqvp also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.899319
FireEyeGeneric.mg.735efcaa19c2a862
McAfeeArtemis!735EFCAA19C2
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00577ea11 )
AlibabaTrojan:Win32/Glupteba.5f04610d
K7GWTrojan ( 00577ea11 )
CrowdStrikewin/malicious_confidence_100% (D)
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
KasperskyTrojan.Win32.Copak.pqvp
BitDefenderGen:Variant.Razy.899319
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Trojan-gen
TencentTrojan.Win32.Copak.wd
Ad-AwareGen:Variant.Razy.899319
SophosMal/Generic-R + Troj/Agent-BGOS
DrWebTrojan.Siggen14.7487
ZillyaTrojan.Injector.Win32.1327932
TrendMicroTROJ_GEN.R002C0DAL22
McAfee-GW-EditionBehavesLike.Win32.Glupteba.cc
EmsisoftGen:Variant.Razy.899319 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Dropper.Gen
MAXmalware (ai score=84)
Antiy-AVLTrojan/Generic.ASMalwS.34EED64
MicrosoftTrojan:Win32/Glupteba.DB!MTB
GDataGen:Variant.Razy.899319
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
BitDefenderThetaGen:NN.ZexaF.34160.juZ@aeSC5Sd
ALYacGen:Variant.Razy.899319
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Crypt
TrendMicro-HouseCallTROJ_GEN.R002C0DAL22
RisingTrojan.Injector!1.CD26 (RDMK:cmRtazq/upuiG5tPtgMfHVgNIs07)
IkarusTrojan.Win32.Glupteba
eGambitUnsafe.AI_Score_99%
FortinetW32/Copak.AGMG!tr
AVGWin32:Trojan-gen
Cybereasonmalicious.a4da7b
PandaTrj/CI.A
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan.Win32.Copak.pqvp?

Trojan.Win32.Copak.pqvp removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment