Trojan

Trojan:Win32/Glupteba!pz removal tips

Malware Removal

The Trojan:Win32/Glupteba!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Glupteba!pz virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:Win32/Glupteba!pz?


File Info:

name: C38E1792EE5B82382EC0.mlw
path: /opt/CAPEv2/storage/binaries/20c6a34462f01a93d2cadb33e269fc013cd6d0b4a98c0b8e322bb0a9d8e461ad
crc32: 44F63DBC
md5: c38e1792ee5b82382ec0050016161a4e
sha1: 024254deee07f6dbbe81cb32fd51a733728a1f18
sha256: 20c6a34462f01a93d2cadb33e269fc013cd6d0b4a98c0b8e322bb0a9d8e461ad
sha512: 408113b9ed302d4b13661701c41f95c49fd03acb844d60e41f29eae8b9e940cc32c4fbb9d16adaf9b40d6f2d35226403a7e8798b1e7995c553be9c7151088277
ssdeep: 1536:dbynv7JpAOYi16tvBudEGFDfFfmtgDqJeS3dcJt/VtpAf:MP+06t+D0tPx3WJBji
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T13783BFD75E7993AAE24A053E09E330B2CA64BF0BFF41D2778A24D61D81207CD39661D7
sha3_384: 91e6db08699ee3d619489ab1d985d7af428c580768e9cf180e21332d0b1bb3349feba29051a807d53fd0f4efe75ad2c2
ep_bytes: be000000005081c20100000081ef13d6
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Trojan:Win32/Glupteba!pz also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Copak.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Trojan.Heur.fuW@IHo3wXi
FireEyeGeneric.mg.c38e1792ee5b8238
SkyhighBehavesLike.Win32.Glupteba.mc
ALYacGen:Trojan.Heur.fuW@IHo3wXi
MalwarebytesMalware.Heuristic.3018
ZillyaTrojan.Injector.Win32.1036426
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0058e60a1 )
BitDefenderGen:Trojan.Heur.fuW@IHo3wXi
K7GWTrojan ( 0058e60a1 )
Cybereasonmalicious.eee07f
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/Injector.DZQA
APEXMalicious
KasperskyHEUR:Trojan.Win32.Copak.vho
AlibabaTrojan:Win32/Copak.70356671
NANO-AntivirusVirus.Win32.Gen.ccmw
RisingTrojan.Injector!1.CD26 (CLASSIC)
SophosTroj/Agent-BGOS
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.Siggen14.19386
VIPREGen:Trojan.Heur.fuW@IHo3wXi
Trapminemalicious.high.ml.score
EmsisoftGen:Trojan.Heur.fuW@IHo3wXi (B)
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=100)
JiangminTrojan.Copak.wxl
GoogleDetected
AviraTR/Crypt.XPACK.Gen
VaristW32/Kryptik.ECM.gen!Eldorado
Antiy-AVLTrojan/Win32.Injector
Kingsoftmalware.kb.a.1000
MicrosoftTrojan:Win32/Glupteba!pz
ArcabitTrojan.Heur.E84C78
ZoneAlarmHEUR:Trojan.Win32.Copak.vho
GDataGen:Trojan.Heur.fuW@IHo3wXi
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R293305
McAfeeGlupteba-FTSD!C38E1792EE5B
DeepInstinctMALICIOUS
VBA32BScope.Trojan.Wacatac
Cylanceunsafe
PandaTrj/CI.A
TencentTrojan.Win32.Copak.ze
YandexTrojan.Copak!BezO8UINMwE
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.ECM!tr
BitDefenderThetaAI:Packer.4C54403D1B
AVGWin32:Evo-gen [Trj]
AvastWin32:Evo-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan:Win32/Glupteba!pz?

Trojan:Win32/Glupteba!pz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment