Trojan

Trojan:Win32/Occamy.C8D removal guide

Malware Removal

The Trojan:Win32/Occamy.C8D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Occamy.C8D virus can do?

  • Executable code extraction
  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan:Win32/Occamy.C8D?


File Info:

crc32: C366CA20
md5: 3fdae2417fe82e7e4f48327f8fde1f82
name: 3FDAE2417FE82E7E4F48327F8FDE1F82.mlw
sha1: ecd9a71891738e430c35b815b469386c8d4e2873
sha256: 8d2282bd55449742d728687f05f73e3f61af4283af93b5ac2ec03f6620a15af7
sha512: 88b0507c86d89a613d182f72592f02330186f61f4040f043da4ad24a0de13a487a6f31a52c3fb090b1e6db59047f8a1650ce8928b6790e1f304a30c53c239970
ssdeep: 24576:ziKy4zZRV/4TcbgIGes5ywYtvMzg7rmSM3iI:eurV/4TcbgQVwsvMcmv3iI
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
InternalName: DeployPatch
FileVersion: 2.01.0110
CompanyName: Softlink Logistic Systems Pvt. Ltd.
Comments: Upgrades products to the next version.
ProductName: DeployPatch
ProductVersion: 2.01.0110
FileDescription: Application Upgrader
OriginalFilename: DeployPatch.exe

Trojan:Win32/Occamy.C8D also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.50844
FireEyeGeneric.mg.3fdae2417fe82e7e
McAfeeGenericATG-FCNH!3FDAE2417FE8
CylanceUnsafe
VIPRETrojan.Win32.Generic.pak!cobra
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKDZ.50844
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.17fe82
CyrenW32/VBInject.TWFD-2143
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Malware.Generickdz-6988690-0
AlibabaTrojanDropper:Win32/VBInject.20042eab
NANO-AntivirusTrojan.Win32.Inject3.fspvhh
AegisLabTrojan.Win32.Generic.4!c
RisingDropper.Generic!8.35E (CLOUD)
Ad-AwareTrojan.GenericKDZ.50844
SophosMal/Generic-S
ComodoTrojWare.Win32.VBObfus.ITWR@5j9kjp
F-SecureTrojan.TR/Dropper.Gen
DrWebTrojan.Inject3.6111
ZillyaDropper.VB.Win32.54578
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
EmsisoftTrojan.GenericKDZ.50844 (B)
IkarusTrojan-Dropper
JiangminTrojanDropper.VB.amfu
AviraTR/Dropper.Gen
MAXmalware (ai score=89)
Antiy-AVLTrojan[Dropper]/Win32.VB
MicrosoftTrojan:Win32/Occamy.C8D
ArcabitTrojan.Generic.DC69C
SUPERAntiSpywareTrojan.Agent/Gen-Vobfus
GDataTrojan.GenericKDZ.50844
CynetMalicious (score: 100)
AhnLab-V3Dropper/Win32.VB.R31757
Acronissuspicious
BitDefenderThetaGen:NN.ZevbaF.34804.1m3@aeiY!mgi
VBA32Trojan.Inject
MalwarebytesBladabindi.Backdoor.Njrat.DDS
PandaTrj/Genetic.gen
TencentMalware.Win32.Gencirc.10b8a104
YandexTrojan.GenAsa!yrrakqeDgaY
SentinelOneStatic AI – Malicious PE
FortinetW32/VB.BHJF!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Generic/HEUR/QVM41.2.2C85.Malware.Gen

How to remove Trojan:Win32/Occamy.C8D?

Trojan:Win32/Occamy.C8D removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment