Should I remove “Trojan.Win32.Copak.tuls”?

The Trojan.Win32.Copak.tuls is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.tuls virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Creates a copy of itself
• Deletes executed files from disk
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Copak.tuls?

File Info:
name: 96B9E94BF598B283C4CA.mlw
path: /opt/CAPEv2/storage/binaries/d410c8622a46c5783655b0b8fedd4a67ed4dd7cda209340ae3089026643f99b7
crc32: 46CD4A7C
md5: 96b9e94bf598b283c4ca61c055d748cb
sha1: 1e583a2ff3f634e9e07b1375125332a5f255cf92
sha256: d410c8622a46c5783655b0b8fedd4a67ed4dd7cda209340ae3089026643f99b7
sha512: 8f96dfec41a13f2166dd6213e67c65c84c4e83179d6503f847724abc7627d3cee00c7ba3021114d6ee72bef6be8119c7763da091a7310d35a78a1682acd6e7fe
ssdeep: 24576:6FLR8pzUJXOqO4mzJvD9Prda/ZSTeF+77LX:6F8QJ+qnmVpPrdgqeF+bX
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17D25BF68120D55AFD0DB8779EE6DDEF111BA69786E63D2B132C1BCE738223C0A5112F1
sha3_384: d0e6c8629407a0054a28740fd62d8bea7a385c87204b68808bdbae715f0721237425ac6114c17c7649ccc444f93d7722
ep_bytes: 280d05fe786481797d8588e8ffcfe052
timestamp: 1975-06-24 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.tuls also known as:

How to remove Trojan.Win32.Copak.tuls?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.