TonyMag Posted December 29, 2021 ID:1495160 Share Posted December 29, 2021 Hello everyone, Today I got a notification from windows defender that i have a virus named occamy.c23. I saw another post with the op having the exact same issue. So i went ahead and ran the farbar tool. Below is my file. Is everything ok? And is there anything that might have leaked? Like passwords, files etc? Is there anything else i need to do? Sincerely Tony. Addition.txt Link to post Share on other sites More sharing options...
TonyMag Posted December 29, 2021 Author ID:1495161 Share Posted December 29, 2021 P.S. MalwareBytes showed no infected files Link to post Share on other sites More sharing options...
JSntgRvr Posted December 29, 2021 ID:1495166 Share Posted December 29, 2021 Download the enclosed file. Save it in the same location FRST is saved. Once saved, open FRST and click on the Fix button. A report will be produced in the same location FRST was ran. Please post its contents in your next reply. Download AdwCleaner and save it to your desktop. Double click AdwCleaner.exe to run it. Click Scan Now ... When the scan has finished a Scan Results window will open. Click Cancel (at this point do not attempt to Quarantine anything that is found) Now click the Log Files tab ... Double click on the latest scan log (Scan logs have a [S0*] suffix, where * is replaced by a number, the latest scan will have the largest number) A Notepad file will open containing the results of the scan. Please post the contents of the file in your next reply. Re-Scan with FRST and post both, the FRST.txt log and the Addition.txt log. Fixlist.txt Link to post Share on other sites More sharing options...
TonyMag Posted December 29, 2021 Author ID:1495169 Share Posted December 29, 2021 Thanks for your help, All requested files are attached below. Addition.txt FRST.txt AdwCleaner[S00].txt Fixlog.txt Link to post Share on other sites More sharing options...
Solution JSntgRvr Posted December 29, 2021 Solution ID:1495171 Share Posted December 29, 2021 Download the enclosed file. Fixlist.txt Save it in the same location FRST is saved. Once saved, open FRST and click on the Fix button. A report will be produced in the same location FRST was ran. Please post its contents in your next reply. AdwCleaner - Clean Double click AdwCleaner.exe to run it. Click Scan Now When the scan has finished a Scan Results window will open. Please check all boxes and then click Quarantine Click Next If any pre-installed software was found on your machine, a prompt window will open ... Click OK to close it Check any pre-installed software items you want to remove (if they're not causing you a problem I recommend you don't select any) Click Quarantine A prompt to save your work will appear ... Click Continue when you're ready to proceed. A prompt to restart your computer will appear ... Click Restart Now Once your computer has restarted ... If it doesn't open automatically, please start AdwCleaner ... Click the Log Files tab ... Double click on the latest Clean log (Clean logs have a [C0*] suffix, where * is replaced by a number, the latest scan will have the largest number) A Notepad file will open containing the results of the removal. Please post the contents of the file in your next reply. The following application will remove tools used and quarantined items: Please download KpRm by Kernel-panik and save to your Desktop. Click on KpRm.exe to run the tool. Vista/Windows 7/8/10 users right-click and select Run As Administrator. Put a check mark next to these items: - Delete tools - Delete now Click the "Run" button. When the tool has finished, it will create and open a log report and delete itself. Run a scan with Windows Defender and let me know if the detections are still present. Link to post Share on other sites More sharing options...
TonyMag Posted December 29, 2021 Author ID:1495188 Share Posted December 29, 2021 Everything looks good, nothing showing up in windows defender scan. What did this malware do to my computer? Should I change all my passwords now? Appreciate your help. Link to post Share on other sites More sharing options...
JSntgRvr Posted December 30, 2021 ID:1495199 Share Posted December 30, 2021 (edited) According to what I have read, it is confirmed that Occamy Trojan or Win32/Occamy.CDD (also known as Occamy. C virus) is a computer malware. It is designed to provide remote cybercriminals with remote access to your system. Antivirus programs including Windows Defender, detect it as Trojan:Win32/Occamy. It majorly works as a remote access program, stealthily entering your computer and taking control of it. Users mostly download this threat during piracy activities, such as downloading software crack or keygen. After an infection, it is always recommended that all passwords be changed. Malwarebytes will detect it as Trojan.Injector. I am glad the system is now clear. Best regards. 🙂 Edited December 30, 2021 by AdvancedSetup Corrected font issue Link to post Share on other sites More sharing options...
Maurice Naggar Posted February 5, 2022 ID:1500898 Share Posted February 5, 2022 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following to help you better protect your computer and privacy Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts