Trojan

Trojan:Win32/Occamy.C4F removal tips

Malware Removal

The Trojan:Win32/Occamy.C4F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Occamy.C4F virus can do?

  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win32/Occamy.C4F?


File Info:

crc32: A84198EB
md5: bd0b2055d7c558b33783a35e14e81608
name: BD0B2055D7C558B33783A35E14E81608.mlw
sha1: 03bd054afe02b912ba492b0b949ba6d534431293
sha256: 4f62d3fcb38e7a7700a64d8ed391bebe6afd42413c5ff25c9c5caa0f104f56e7
sha512: b9c0ddba18ac359ca0058194270613af6507fef41176f5744e61bc873f89f18fab7449a1f19e01a2d276fb08462c0e6a3af66d887b4f95ed0c7bcc4a07cd224f
ssdeep: 3072:7O1GVgQvlZmpwtZYhsWkVr42rSgO1GVgA:78GVNuwzYin8GVT
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2017
Assembly Version: 1.0.0.0
InternalName: PAYMENT.exe
FileVersion: 1.0.0.0
ProductName: WindowsApplication1
ProductVersion: 1.0.0.0
FileDescription: WindowsApplication1
OriginalFilename: PAYMENT.exe

Trojan:Win32/Occamy.C4F also known as:

MicroWorld-eScanTrojan.Ransom.BWO
FireEyeGeneric.mg.bd0b2055d7c558b3
McAfeeArtemis!BD0B2055D7C5
CylanceUnsafe
ZillyaTool.FakeFilecoder.Win32.40
SangforPUP.MSIL.FakeFilecoder.BX
K7AntiVirusTrojan ( 005209d61 )
BitDefenderTrojan.Ransom.BWO
K7GWTrojan ( 005209d61 )
Cybereasonmalicious.5d7c55
SymantecTrojan.Gen.2
APEXMalicious
AvastWin32:Malware-gen
AlibabaHoax:MSIL/FakeFilecoder.9c42d130
ViRobotTrojan.Win32.Ransom.329216.B
AegisLabTrojan.Win32.FakeFilecoder.4!c
TencentMsil.Risk.Hoax.Pfjf
Ad-AwareTrojan.Ransom.BWO
EmsisoftTrojan.Ransom (A)
ComodoMalware@#6ql64b0epl25
F-SecureJoke.JOKE/FakeFilecoder.vnqay
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-R + Mal/PayFraud-A
AviraJOKE/FakeFilecoder.vnqay
MAXmalware (ai score=87)
Antiy-AVLTrojan/Win32.BTSGeneric
MicrosoftTrojan:Win32/Occamy.C4F
ArcabitTrojan.Ransom.BWO
GDataTrojan.Ransom.BWO
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZemsilF.34590.uq1@ayDnLZd
ALYacTrojan.Ransom.Payment
MalwarebytesMalware.AI.3854138525
PandaTrj/GdSda.A
ESET-NOD32MSIL/Hoax.FakeFilecoder.BX
YandexHoax.FakeFilecoder!REQs3FoKlqc
SentinelOneStatic AI – Malicious PE
FortinetRiskware/Filecoder
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_60% (D)
Qihoo-360HEUR/QVM03.0.2361.Malware.Gen

How to remove Trojan:Win32/Occamy.C4F?

Trojan:Win32/Occamy.C4F removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment