Trojan.Win32.Copak.zfql malicious file

The Trojan.Win32.Copak.zfql is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.zfql virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Creates a copy of itself
• Deletes executed files from disk
• Anomalous binary characteristics
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Copak.zfql?

File Info:
name: EB00F602D6FDBB6CDF31.mlw
path: /opt/CAPEv2/storage/binaries/a823a00c8c54cd31861450682e5e9fa2d0f816c83ef791fb5765f4240d3d4619
crc32: A894C3C6
md5: eb00f602d6fdbb6cdf31cec80359c849
sha1: 9928ab571ad3a011afbd8a1d3d87f1a01b9cee58
sha256: a823a00c8c54cd31861450682e5e9fa2d0f816c83ef791fb5765f4240d3d4619
sha512: feedb68f15d02e73b005cca6255489fe2ca9e1e69fb5fee9e0b5beb303ac7b421a168d8ef46bfbcbd1ae7bf316af8ad505bfaec812f654a04fd1b2924cc4189e
ssdeep: 12288:jvaMJt1m0xKc9OxaZgPnN5jVDa/ZS4fDy:eMVm0xKfda/ZS4fDy
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T12815385C936357C3CC35577AAD1D8A21A7D078B827EADEA134A37A57B8E33D0D482930
sha3_384: 1b440593c960fe00681f565905e494c4ba128fb743813bb947e7d87229a71332e6e12060069cc7c19145e94e04c4b3b1
ep_bytes: d6c08f7a86a90bfd8348026c01026ad6
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.zfql also known as:

How to remove Trojan.Win32.Copak.zfql?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.