Trojan.Win32.Copak.znlr malicious file

The Trojan.Win32.Copak.znlr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.znlr virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Creates a copy of itself
• Deletes executed files from disk
• Anomalous binary characteristics
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Copak.znlr?

File Info:
name: 9273F8130F02D19055BE.mlw
path: /opt/CAPEv2/storage/binaries/39a7e42c03abe8467cdfdd5e5dd8c5c04642d1e2fa70bfdf185951b440810a3c
crc32: 410E99A3
md5: 9273f8130f02d19055beaf05f0cf529e
sha1: 0bc83a65654811ef94fc926cd50f242cb0865e55
sha256: 39a7e42c03abe8467cdfdd5e5dd8c5c04642d1e2fa70bfdf185951b440810a3c
sha512: 346184baeb72d45b991cb517516f75571e20689d9177b833cd7e0d448d1cba3e6a6ae77caf98d2edbbb59098ab7703ac419ae8d1a1f6d2f93edd59fb1881dd1d
ssdeep: 12288:IpGLUu0eproCPGDdonRlYtBjVDa/ZS4fD2HnhvMCtjW:IIIuDoCPGDeLYt3a/ZS4fDwueC
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T16365F4391F9548B7CC76527E691EAEE280116C3C6E12F2713389B9B63E227D8F747520
sha3_384: becf70f67787a834095e47fee83708053739e056698b112372445ed8c79d5d631d0503934d250b596186f2f0b4d7d8e1
ep_bytes: abb5c043fbdc44c4fe3d4d557c7725ef
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.znlr also known as:

How to remove Trojan.Win32.Copak.znlr?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.