Trojan

How to remove “Trojan:Win32/Glupteba!pz”?

Malware Removal

The Trojan:Win32/Glupteba!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Glupteba!pz virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Creates a copy of itself
  • Deletes executed files from disk

How to determine Trojan:Win32/Glupteba!pz?


File Info:

name: C8A0DAB5BEB254094965.mlw
path: /opt/CAPEv2/storage/binaries/2c5b2c0bc2b11d7fbfc1b9d2a6b8ff741785a8a87a54bb84b32d85c0a7d21a8a
crc32: DD0012C8
md5: c8a0dab5beb25409496593d8680108b7
sha1: 7f73a4c0b7162fbc68556da0d88fa5de11618100
sha256: 2c5b2c0bc2b11d7fbfc1b9d2a6b8ff741785a8a87a54bb84b32d85c0a7d21a8a
sha512: 69d88a1e84648a1fc0ad9db58783301d10d974dcc7597acc07dfd396bd0414dd2c4ab0b0fbf683d0d183c5922d9724b35c6e3a2b2b747fec174ba7512b18f3fc
ssdeep: 1536:36dzrTXxfjlL7qXx/vEwhBpmWc4f1jr/evrzeEzMtFDAU0RGtkkV6GpsE9Zqd:3KzrThrlLy/vEwhBpmWc01jreDzitF9W
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T14183026D005B8201F654DEB80B76A199B9BCCBA3B022115FF61D9CC41E6B28FDC8647E
sha3_384: 3f9874922dee987f0b80a4e775309965dd93bef9025da62b31e64ba3af5054ce7f2985e563de5b07381640cac075227f
ep_bytes: bb000000005789f68b0c2483c40481c0
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan:Win32/Glupteba!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Razy.870640
FireEyeGeneric.mg.c8a0dab5beb25409
SkyhighBehavesLike.Win32.Glupteba.mc
McAfeeGlupteba-FUBP!C8A0DAB5BEB2
MalwarebytesMalware.AI.4203939078
VIPREGen:Variant.Razy.870640
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0058c5ff1 )
BitDefenderGen:Variant.Razy.870640
K7GWTrojan ( 005304e81 )
Cybereasonmalicious.0b7162
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.XVS
CynetMalicious (score: 100)
APEXMalicious
KasperskyHEUR:Trojan.Win32.Copak.pef
AlibabaTrojan:Win32/Copak.a558edb1
NANO-AntivirusVirus.Win32.Gen.ccmw
RisingTrojan.Kryptik!1.D12D (CLASSIC)
SophosTroj/Agent-BGOS
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.Siggen13.35958
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Razy.870640 (B)
IkarusTrojan.Win32.Injector
JiangminTrojan.Copak.acmq
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.GenKryptik
Kingsoftmalware.kb.a.997
MicrosoftTrojan:Win32/Glupteba!pz
ArcabitTrojan.Razy.DD48F0
ZoneAlarmHEUR:Trojan.Win32.Copak.pef
GDataGen:Variant.Razy.870640
VaristW32/Kryptik.ECM.gen!Eldorado
AhnLab-V3Trojan/Win.Generic.R433984
BitDefenderThetaGen:NN.ZexaCO.36792.fuW@aejYyMk
ALYacGen:Variant.Razy.870640
MAXmalware (ai score=100)
DeepInstinctMALICIOUS
VBA32BScope.Trojan.Wacatac
Cylanceunsafe
PandaTrj/CI.A
TencentTrojan.Win32.Copak.pa
YandexTrojan.Copak!mospfTHNu6w
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.ECM!tr
AVGWin32:Evo-gen [Trj]
AvastWin32:Evo-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan:Win32/Glupteba!pz?

Trojan:Win32/Glupteba!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment