Trojan

Trojan.Win32.Copak.qejg removal tips

Malware Removal

The Trojan.Win32.Copak.qejg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Copak.qejg virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Deletes its original binary from disk
  • Created a process from a suspicious location
  • Creates a copy of itself

How to determine Trojan.Win32.Copak.qejg?


File Info:

name: 097C0FE665009A214F63.mlw
path: /opt/CAPEv2/storage/binaries/0530a5498730b6e4f3daa851f3edc5ecc1ebf74354ec729085dc20abf93a997e
crc32: 55B65158
md5: 097c0fe665009a214f63a594c72dce0c
sha1: b0fa8659eda002ae78eced360c9c5b882a823b45
sha256: 0530a5498730b6e4f3daa851f3edc5ecc1ebf74354ec729085dc20abf93a997e
sha512: dfae816e6f42e0b4ccb94613ad72a36fd17e6aa31e09853cc0aa1b56c8ab0b1c12cd8b2a1830d3558f9da2ddf0d9dc371ed7750f5ff64c3909b0f2662e08f6c6
ssdeep: 98304:9mabUabNg6abUabVabUabNg6abUabGabUabNg6abUabVabUabNg6abUab6:9mGUGNg6GUGVGUGNg6GUGGGUGNg6GUGC
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15B16D05A16318754C46609FBF2046879F4F50AEBBC6E9994401EF7F089FEA283A3D347
sha3_384: bf5693af6e419fa490237afb1a217e4249c7ca98471213b6909356ae5fdf6c5d91f3240abd7f1cca79390785b4b83f33
ep_bytes: bb97738b06baa6d1ef4129c783ec04c7
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan.Win32.Copak.qejg also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen14.7487
MicroWorld-eScanGen:Variant.Razy.865537
FireEyeGeneric.mg.097c0fe665009a21
ALYacGen:Variant.Razy.865537
CylanceUnsafe
SangforTrojan.Win32.Copak.gen
K7AntiVirusTrojan ( 00577ea11 )
AlibabaTrojan:Win32/Glupteba.a4f14ce7
K7GWTrojan ( 00577ea11 )
Cybereasonmalicious.665009
BitDefenderThetaGen:NN.ZexaF.34212.!xZ@aeSC5Sd
CyrenW32/Zbot.W.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.DZQA
TrendMicro-HouseCallTROJ_GEN.R002C0DB922
Paloaltogeneric.ml
ClamAVWin.Malware.Razy-9938946-0
KasperskyTrojan.Win32.Copak.qejg
BitDefenderGen:Variant.Razy.865537
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
AvastWin32:Trojan-gen
TencentTrojan.Win32.Copak.wd
Ad-AwareGen:Variant.Razy.865537
EmsisoftGen:Variant.Razy.865537 (B)
F-SecureHeuristic.HEUR/AGEN.1217036
TrendMicroTROJ_GEN.R002C0DB922
McAfee-GW-EditionBehavesLike.Win32.Glupteba.wc
SophosML/PE-A + Troj/Agent-BGOS
IkarusTrojan.Win32.Glupteba
GDataGen:Variant.Razy.865537
AviraHEUR/AGEN.1217036
GridinsoftRansom.Win32.Wacatac.sa
ArcabitTrojan.Razy.DD3501
ZoneAlarmTrojan.Win32.Copak.qejg
MicrosoftTrojan:Win32/Glupteba.DB!MTB
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
McAfeeGlupteba-FTSD!097C0FE66500
MAXmalware (ai score=88)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Crypt
APEXMalicious
RisingTrojan.Injector!1.CD26 (CLOUD)
YandexTrojan.Injector!aaQUw3YFnss
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_98%
FortinetW32/Copak.AGMG!tr
AVGWin32:Trojan-gen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.121218.susgen

How to remove Trojan.Win32.Copak.qejg?

Trojan.Win32.Copak.qejg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment