How to remove “Trojan:Win32/Occamy.C75”?

The Trojan:Win32/Occamy.C75 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Occamy.C75 virus can do?

The binary likely contains encrypted or compressed data.

How to determine Trojan:Win32/Occamy.C75?


File Info:
crc32: 6D16BA84
md5: 08ee7681c8166fde78a1f32ea61ca428
name: 08EE7681C8166FDE78A1F32EA61CA428.mlw
sha1: 5a3afaac3b833931858d6cca0cb93a829a3a4681
sha256: 752a36d42e517fed7cc6c81edfcfc97099e68397ee34944fc022e6b26585b090
sha512: aa83c36d4f1b1c7894e34e063537ba08a80692916856b48a42530ff7ed5d32868768d28441ad9f4f1bcb7fee5bc5753b47aabc8bafb8c8f7dbcbdd47a665ce5d
ssdeep: 6144:y9FAg3JihdjwWSRvIqqLwKbrw2cnTEY/T8XXrZTOXSyodSQUKQwfKDA1YFpMiv0:ywg5oVSRvIq2w2qTEqT8nJEXodx9fK4
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: (c) Gastropneumatic
Assembly Version: 1.0.0.0
InternalName: DataKeeper.exe.exe
FileVersion: 1.0.0.0
CompanyName: Gastropneumatic
LegalTrademarks: (tm) Amyotonia Gastropneumatic
Comments: Amyotonia Gastropneumatic
ProductName: Amyotonia
ProductVersion: 1.0.0.0
FileDescription: Amyotonia
OriginalFilename: DataKeeper.exe.exe

Trojan:Win32/Occamy.C75 also known as:

K7AntiVirus	Trojan ( 004b89791 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.25225
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ransom.1540
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 004b89791 )
Cybereason	malicious.1c8166
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Packed.Confuser.BR
APEX	Malicious
Avast	Win32:RansomX-gen [Ransom]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ransom.1540
NANO-Antivirus	Trojan.Win32.Encoder.faurnx
MicroWorld-eScan	Gen:Variant.Ransom.1540
Tencent	Win32.Trojan.Generic.Ije
Ad-Aware	Gen:Variant.Ransom.1540
Sophos	Mal/Generic-R + Mal/DataKeep-A
Comodo	Malware@#137jvj9gay8e3
F-Secure	Heuristic.HEUR/AGEN.1109350
BitDefenderTheta	Gen:NN.ZemsilF.34670.vm0@a0hxwtc
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
FireEye	Generic.mg.08ee7681c8166fde
Emsisoft	Trojan-Ransom.DataKeeper (A)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1109350
Microsoft	Trojan:Win32/Occamy.C75
Arcabit	Trojan.Ransom.D604
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Ransom.1540
AhnLab-V3	Trojan/Win32.RL_Generic.C3454357
McAfee	Artemis!08EE7681C816
MAX	malware (ai score=96)
Malwarebytes	Malware.AI.3254785175
Panda	Trj/GdSda.A
Rising	Trojan.Generic!8.C3 (CLOUD)
Yandex	Trojan.Agent!sTGiMOyIA3E
Ikarus	Trojan-Ransom.Rokku
Fortinet	W32/Generic.A!tr
AVG	Win32:RansomX-gen [Ransom]
Paloalto	generic.ml

How to remove Trojan:Win32/Occamy.C75?

Trojan:Win32/Occamy.C75 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X