About “Trojan.Win32.Copak.qdlb” infection

The Trojan.Win32.Copak.qdlb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.qdlb virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.qdlb?

File Info:
name: 89CB5E449DF51CC3304D.mlw
path: /opt/CAPEv2/storage/binaries/3533c9f1522824263675dcb59bcc60b4296476f0c0d3d8858938a5863aa71199
crc32: 37715AC5
md5: 89cb5e449df51cc3304d4577c368ad33
sha1: f7a1641115485bc3726823416e064866ab942c8d
sha256: 3533c9f1522824263675dcb59bcc60b4296476f0c0d3d8858938a5863aa71199
sha512: 92e7d36eba5bfcf3ee214cd70fe466bc5e835335f9821a9dc8d07c25916827982505b1ffada343c419c77b3815eda43bfb3ff634eb94df5d7f8597fa5e883482
ssdeep: 12288:QaKb7vYR5Q/KodEvYR5QYMrWCavYR5Q/KodEvYR5Q4:nKbV
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T152D4DF4202EE371DCC9699B192C0EC09362D6B2A90EEE25D77B0E0DCB38455B1B5BFD5
sha3_384: 0f51767e3b927402dd9e5a71f6ef555bfab3081a21c6553bb1369d1592a36ad76885acfac3925b970773a706cd0eb037
ep_bytes: b8e87424a383ec04c70424d885400029
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.qdlb also known as:

How to remove Trojan.Win32.Copak.qdlb?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.