Trojan.Win32.Copak.qcoc information

The Trojan.Win32.Copak.qcoc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.qcoc virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.qcoc?

File Info:
name: D4CCB21FDB04910AFA28.mlw
path: /opt/CAPEv2/storage/binaries/3c8324e92a68dcb666a18dc868ddab0b9ecfc20b679da1aca74630167921f95e
crc32: 95BF4C3C
md5: d4ccb21fdb04910afa28092ba65032b2
sha1: aa768c408138d7aaf72f1168156b7844336be18e
sha256: 3c8324e92a68dcb666a18dc868ddab0b9ecfc20b679da1aca74630167921f95e
sha512: a546d689d4eeb65420b28926fcc5639c92a66ab81e9d7c01b839ebe46844decc312bdabbd15067301c9fc3ec3a21e8d10ad32299c9e631783ac2aabea23c7ff6
ssdeep: 6144:dOivP+PQmYByjiXmaHCKi7lMPIj31xqkIGbYyyUSQ+g3kXmaHCKi7lMPIj31xqkF:dhPKYBwiXbHCKihLb1NF5ypZXbHCKiht
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1FA64BFE38A1501B2E0F05434550291B737D67AA93D742A0FA6744E68BD7DB2B30F3B6E
sha3_384: 4563fa51b1bf64efc5107c1671cb2b2b18eebfef778121e025b8889ae343dcefd92721afcecdcd04724f4c693dca509b
ep_bytes: 83ec04c70424d17073c65b09d281c14b
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.qcoc also known as:

How to remove Trojan.Win32.Copak.qcoc?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.