About “Trojan.Win32.Copak.qctd” infection

The Trojan.Win32.Copak.qctd is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.qctd virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.qctd?

File Info:
name: 7ED99C17357DE1ED1E16.mlw
path: /opt/CAPEv2/storage/binaries/05c0e4c2e4bcb36230562940a90208917a5a95b21db415fb4b0ed1a30735e437
crc32: DAB526D3
md5: 7ed99c17357de1ed1e16242ff87339b7
sha1: d2e0f196feb00e5b267203282b696b69b3cb893b
sha256: 05c0e4c2e4bcb36230562940a90208917a5a95b21db415fb4b0ed1a30735e437
sha512: 3d05abb3a193d17f92c428c174c4833d96802a3ad8fb7511e6cacced7460ba432301974795a1b06ade63b891797a4a111a940aec4aabf89cc4ddeb9cdd8d472a
ssdeep: 12288:U4h95T8r9VrL2p4Emi7uQqVFg9r9VrL2p4Eb:1950VrL9Ni7cuVrL9s
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17D84CF65457E8052F0ADED34B680997FA4A42BA2EDC1A93BC75002D3E7133367F93C29
sha3_384: 9567761b75480d9397ffd25e01297a93ba96371186db3fba193e33d0aabb3ad02dbbdc334c7c6b5c510317d8d77d01f2
ep_bytes: 68b04597e55e68d885400029c783ec04
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.qctd also known as:

How to remove Trojan.Win32.Copak.qctd?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.