Trojan

Trojan:Win32/Copak.GPX!MTB removal guide

Malware Removal

The Trojan:Win32/Copak.GPX!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Copak.GPX!MTB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Creates a copy of itself
  • Deletes executed files from disk

How to determine Trojan:Win32/Copak.GPX!MTB?


File Info:

name: 207A622986BB4C0F68D3.mlw
path: /opt/CAPEv2/storage/binaries/92f9595adfe10c22b24e1335405dda80028fa60879f465c4ecbcb819db10a0a6
crc32: DBD5D8BF
md5: 207a622986bb4c0f68d3ed0f39e068ef
sha1: ce52f9cd3fb9556db65bba111490f6b864f389e5
sha256: 92f9595adfe10c22b24e1335405dda80028fa60879f465c4ecbcb819db10a0a6
sha512: 22b4d9fb5f5a7c9b277489920c46e9432fc62235f0a6ebeab5eb7f17d574e379067d727812f7688168ecd2646913d7a698ba706ef2d1dce883c28f73e01cdde5
ssdeep: 1536:s4ep0fHdCn15xuUmSfZQ8DYSkXoltPozhA0DUhzDLxfuO62CrvC1kekVp6R:5/A15gUjfB81uozS0DU15e2eq1keIpC
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F8C3E14F7A890333C39102F3631D5ACF672D987927AA85A0649D851D23B6F6892FF7D0
sha3_384: 37d7444d07dac7ee7e91c04f26eea4d28a18d48285b0d6631c7ffebeac18c11e83091afa6972af013721c8550c56a07f
ep_bytes: ba000000005781e8b84eac675b81c13a
timestamp: 1971-05-16 00:00:00

Version Info:

0: [No Data]

Trojan:Win32/Copak.GPX!MTB also known as:

BkavW32.AIDetectMalware
AVGWin32:Evo-gen [Trj]
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.527997
SkyhighBehavesLike.Win32.Glupteba.cc
McAfeeGlupteba-FUBP!207A622986BB
MalwarebytesMalware.AI.1539671953
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005304e81 )
K7GWTrojan ( 005304e81 )
CrowdStrikewin/malicious_confidence_100% (D)
ArcabitTrojan.Zusy.D80E7D
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HTAQ
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Trojan.Razy-10015064-0
KasperskyHEUR:Trojan.Win32.Copak.pef
BitDefenderGen:Variant.Zusy.527997
NANO-AntivirusVirus.Win32.Gen.ccmw
AvastWin32:Evo-gen [Trj]
TencentTrojan.Win32.Kryptik.hcy
EmsisoftGen:Variant.Zusy.527997 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
VIPREGen:Variant.Zusy.527997
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.207a622986bb4c0f
IkarusTrojan.Win32.Injector
VaristW32/Injector.BKX.gen!Eldorado
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.Kryptik
Kingsoftmalware.kb.a.999
MicrosoftTrojan:Win32/Copak.GPX!MTB
ZoneAlarmHEUR:Trojan.Win32.Copak.pef
GDataGen:Variant.Zusy.527997
GoogleDetected
VBA32BScope.Trojan.Wacatac
ALYacGen:Variant.Zusy.527997
MAXmalware (ai score=81)
Cylanceunsafe
RisingTrojan.Kryptik!1.D12D (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Injector.DZQA!tr
DeepInstinctMALICIOUS

How to remove Trojan:Win32/Copak.GPX!MTB?

Trojan:Win32/Copak.GPX!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment