What is “Trojan.Win32.Copak.qaac”?

The Trojan.Win32.Copak.qaac is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.qaac virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.qaac?

File Info:
name: E7729F6D3836F2F0DB11.mlw
path: /opt/CAPEv2/storage/binaries/e1524e88d02b2551344507342e44849b84422278407751cb92ba4883675a08cd
crc32: 92FC3965
md5: e7729f6d3836f2f0db11f04c3f62d785
sha1: ae638eeb456f960aaf32a3b92f42f7eff59921b5
sha256: e1524e88d02b2551344507342e44849b84422278407751cb92ba4883675a08cd
sha512: ef852474edf65292ca4a26b1eab3239934f5db81b8c2078689b335e4221322538c5e02cc4db64cc68abeb1fb39d03d42e712b133681bd2f0884969384df007c0
ssdeep: 12288:SrVKR+Ukp47+MqkcBRUju2N/WAP447au64pQ05S:QKRSapGGu2lYBU/S
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T12C94026871863D16E56D1B339B75484480EC8EF2C9A33845AAFD38BAE3F4C577964CB0
sha3_384: ba8a9fcb09761f6cde377cde30adf5de7149aa65c70c24c54fcc30da782d48b5384210bfa2a48d5cbce8bbf4a56c9d60
ep_bytes: 6839c1b69f8b042483c4044289d783ec
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.qaac also known as:

How to remove Trojan.Win32.Copak.qaac?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.