Should I remove “Trojan.Win32.Copak.qeip”?

The Trojan.Win32.Copak.qeip is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.qeip virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Deletes its original binary from disk
• Created a process from a suspicious location
• Creates a copy of itself

How to determine Trojan.Win32.Copak.qeip?

File Info:
name: 1915A272306C62AD5B74.mlw
path: /opt/CAPEv2/storage/binaries/3302e315b10575178e1b28e4f32a0b4376d501dece2035c4212906a562070645
crc32: CE8571E1
md5: 1915a272306c62ad5b7482f1559edcfb
sha1: 070fed2ceccf7d036264eb92c08fdd44959b438d
sha256: 3302e315b10575178e1b28e4f32a0b4376d501dece2035c4212906a562070645
sha512: 22a3509cbd14ecb08bf9425f109865b330367b50630545234346f740e1a6c8e3f96b24784afe9fa617fffdd91cda38ca66d878f9f0e5e11b5aeea21bf2448a36
ssdeep: 49152:T61A6lQ61A6sfq61A6lQ61A67H61A6lQ61A6sfq61A6lQ61A61:T61A6q61A6t61A6q61A6L61A6q61A6tU
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F985BEFF1B8EF0D5C1762635E8828E5A921C4637F806686FC9045954AAF5FB8783C8D3
sha3_384: b52c2fadcf85a6095313763b3fbf5e424260ac2e189bb538bf8c0ae38d98b0b4b16326cb6637709ae8c20db1569a8751
ep_bytes: ba81f0c7ff68d885400083ec04c70424
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.qeip also known as:

How to remove Trojan.Win32.Copak.qeip?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.