throwawayyes11332220039528 Posted February 13, 2021 ID:1438485 Share Posted February 13, 2021 Hello. Windows Defender had found a trojan by the name of "Occamy.C". When this popped up, i ran a quick scan in defender and it didnt show up. Next, i had looked up a guide or something to remove it. I had came across a thread on here talking about how to remove it and i followed the steps of installing adware cleaner and also MalwareBytes 4. I had done that and they had found some other things but not occamy. Now i have just installed FRST and it is running. I would like to post my own so i can get some help with this. Thank you for any help. Link to post Share on other sites More sharing options...
throwawayyes11332220039528 Posted February 13, 2021 Author ID:1438493 Share Posted February 13, 2021 Currently am installing sophos virus removal tool. I hope this goes well. The FRST logs have told me where it comes from. Link to post Share on other sites More sharing options...
throwawayyes11332220039528 Posted February 13, 2021 Author ID:1438497 Share Posted February 13, 2021 I have learned that it is actually "Occamy.B" Using the link provided inside the logs by microsoft brings me to this: https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Occamy.B&threatid=2147725576&enterprise=0 I am using microsoft safety scanner for this currently (full scan). I will see what happens after this Link to post Share on other sites More sharing options...
kevinf80 Posted February 13, 2021 ID:1438533 Share Posted February 13, 2021 Hello throwawayyes11332220039528 and welcome to Malwarebytes, Run the following: Download Farbar Recovery Scan Tool and save it to your desktop. Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.htmlNote: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way... Be aware FRST must be run from an account with Administrator status... Right click on FRST and rename FRSTEnglish Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans" Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach that log to your reply. Thank you, Kevin Link to post Share on other sites More sharing options...
Solution throwawayyes11332220039528 Posted February 13, 2021 Author Solution ID:1438611 Share Posted February 13, 2021 Hello Kevin. I have resolved my issue as i had followed the steps inside of the link provided in the logs for the trojan. After running the MSERT full scan it came up with the exact trojan and had deleted it. Link to post Share on other sites More sharing options...
kevinf80 Posted February 13, 2021 ID:1438613 Share Posted February 13, 2021 Hiya throwawayyes11332220039528, Good to hear you`ve self fixed the problem.... Read the following links to fully understand PC Security and Best Practices, you may find them useful....Answers to Common Security Questions and best PracticesDo I need a Registry Cleaner? Take care and surf safe Kevin... Link to post Share on other sites More sharing options...
kevinf80 Posted February 13, 2021 ID:1438624 Share Posted February 13, 2021 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts