How to remove Occamy Spyware from PC?

In this post, I am going to inform you about the indications of Occamy spyware presence, and how to wipe out Occamy spyware virus from your computer.

GridinSoft Anti-Malware
Editor's choice
GridinSoft Anti-Malware
Manual Occamy removal might be a lengthy and complicated process that requires expert skills. GridinSoft Anti-Malware is a professional antivirus tool that is recommended to get rid of this Occamy spyware trojan.
By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for GridinSoft Anti-Malware. 6 days free trial available.

Describing Occamy spyware

Occamy TrojanSpy as the virus is not an autonomous app, but a component of considerably more expansive as well as complicated malware – trojan-stealer. It’s a variety of trojan, which is targeted on your individual data, and also accumulates really every little thing regarding you as well as your PC. Generally, stealers have keylogger functionalities1, which allow them to capture your keystrokes. Besides that, this virus can accumulate your cookie files, your mobile number, location; it likewise can thieve all your passwords from the keychain inside of the browser.

Name Occamy
Infection Type Spyware
  • Executable code extraction;
  • Creates RWX memory;
  • Reads data out of its own binary image;
  • Drops a binary and executes it;
  • Sniffs keystrokes;
  • Tries to unhook or modify Windows functions monitored by Cuckoo;
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config;
  • Installs itself for autorun at Windows startup;
  • Network activity detected but not expressed in API logs;
  • Anomalous binary characteristics;
Similar behavior OnLineGames, Hoetou, QQWare
Fix Tool

See If Your System Has Been Affected by Occamy spyware

Nonetheless, the big share of Occamy spy are hunting for your banking data: card number, security codes as well as expiration date. For instance, if you use online banking, the Occamy stealer is able to endanger your login and password, so the criminals will certainly get access to your bank account. Various corporation data might likewise be an object of attention of Occamy virus distributors, and in case of large companies such data leak may cause harmful impacts.

Statistics of spyware activity in 2020
TrojanSpy activity in 2020, compared to backdoor viruses activity

The major distribution manners of Occamy spyware are the same to other trojans. Nowadays, most of such programs are spread out via e-mail additions. These additions (. docx,. pdf files) have corrupted macroses, that are utilized by Occamy spy to corrupt your system. Sometimes, such mails include links to the phishing copies of familiar sites, like Facebook, Twitter, LinkedIn or so.

Related Articles
Rating of different spyware activity

Most popular spyware in 20202

It is very important to point out that there is an autonomous type of spyware – for Android operating system. Such apps have identical functions as the PC version does, but mobile malware is spread as a legit program for monitoring the partner’s or kids’s area. Nevertheless, besides thieving different private information, it can also reveal you a completely inaccurate area of the device you are attempting to track. Such situations might cause complaints out of the blue.

How can I understand that my computer is infected with Occamy spyware?

Occamy spy is a very stealth malware, due to the fact that its effectiveness depends upon the length of time it can run prior to being detected. So, Occamy spyware makers made everything to make their malware appearance as invisible as feasible. Naturally, you will notice that your accounts in social networks are swiped, and cash from your financial account is flowing away, but it is too late.

Occamy also known as

K7AntiVirus Password-Stealer ( 004f87bb1 )
Lionic Trojan.Win32.Generic.kZOw
Elastic malicious (high confidence)
DrWeb Trojan.KeyLogger.40217
Cynet Malicious (score: 100)
CAT-QuickHeal Trojan.MauvaiseRI.S5264565
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_70% (D)
Alibaba TrojanSpy:Win32/Keylogger.97ec994a
K7GW Password-Stealer ( 004f87bb1 )
Cybereason malicious.68f4d8
Cyren W32/Gbot.A.gen!Eldorado
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of Win32/KeyLogger.Ardamax.NCA
APEX Malicious
Avast Win32:KeyloggerX-gen [Trj]
Kaspersky Trojan-Spy.Win32.Keylogger.bhtx
BitDefender Gen:Variant.FAkeAlert.105
NANO-Antivirus Riskware.Win32.KeyLogger.fhwasz
MicroWorld-eScan Gen:Variant.FAkeAlert.105
Tencent Win32.Risk.Keylogger.Lorl
Comodo [email protected]
BitDefenderTheta AI:Packer.ABCCBFED1E
McAfee-GW-Edition PUP-XLZ-JP
FireEye Generic.mg.af45ec968f4d8940
Emsisoft Gen:Variant.FAkeAlert.105 (B)
SentinelOne Static AI – Suspicious PE
Jiangmin Monitor.Ardamax.gy
Avira TR/Dropper.Gen
Antiy-AVL Trojan/Generic.ASMalwS.280FC12
Microsoft TrojanSpy:Win32/Occamy.C
GData Gen:Variant.FAkeAlert.105
AhnLab-V3 Trojan/Win32.RL_Generic.R368459
McAfee Artemis!AF45EC968F4D
MAX malware (ai score=100)
VBA32 BScope.Trojan.Keyloggerger
Malwarebytes Adware.Agent
Panda Trj/CI.A
TrendMicro-HouseCall TSPY_ARDAMAX.SM1
Rising [email protected] (RDML:t8c0Ihh0BPT3rd2yM77z2w)
Yandex Trojan.GenAsa!6UhhXNlYuJA
Ikarus PUA.Keylogger.Ardamax
MaxSecure Trojan.Malware.12204647.susgen
Fortinet W32/Agent.SBV!tr
AVG Win32:KeyloggerX-gen [Trj]
Paloalto generic.ml

Domains that associated with Occamy:

What are the symptoms of Occamy trojan?

  • Executable code extraction;
  • Creates RWX memory;
  • Reads data out of its own binary image;
  • Drops a binary and executes it;
  • Sniffs keystrokes;
  • Tries to unhook or modify Windows functions monitored by Cuckoo;
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config;
  • Installs itself for autorun at Windows startup;
  • Network activity detected but not expressed in API logs;
  • Anomalous binary characteristics;

To prevent infiltration of Occamy spyware, stay away from launching any kind of additions to the emails from dubious addresses. These days, at the time of quarantine, email-distributed malware gets even more active. People (specifically ones that began shopping whatever on online-marketplaces) do not take note to the odd e-mail addresses, and open everything that reaches their e-mail. And Occamy stealer is directly in these emails.

How to remove Occamy spyware?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You can attempt to do it manually, nevertheless, like any other trojan, Occamy TrojanSpy applies the changes extremely deep within the system. Therefore, it’s very difficult to spot all these modifications, and maybe even harder to clean up them out. To deal with this harmful malware completely, I can recommend you to use GridinSoft Anti-Malware.


To detect and delete all unwanted applications on your computer with GridinSoft Anti-Malware, it’s better to utilize Standard or Full scan. Quick Scan is not able to find all malware, because it checks only the most popular registry entries and directories.

Scan types in Gridinsoft Anti-Malware

You can see the detected viruses sorted by their possible hazard during the scan process. But to perform any actions against the viruses, you need to wait until the scan is finished, or to stop the scan.

GridinSoft Anti-Malware during the scan

To choose the action for every detected malicious or unwanted program, click the arrow in front of the name of detected malicious program. By default, all the viruses will be moved to quarantine.

List of detected malware after the scan

How to remove Occamy Spyware?

Name: Occamy

Description: Occamy TrojanSpy is classified as a type of malware — malicious software designed to gain access to or damage your computer, often without your knowledge. The Occamy gathers your personal information and relays it to advertisers, data firms, or external users. The Occamy can install additional software and change the security settings on your PC.

Operating System: Windows

Application Category: Spyware

User Review
4 (9 votes)
Comments Rating 0 (0 reviews)
  1. What is Spyware: https://en.wikipedia.org/wiki/Spyware
  2. ESET quaterly report: ESET_Threat_Report_Q22020.pdf

William Reddy

I am from Ireland. My parents bought me a computer when I was 11, and several month after I have got a virus on this PC. I decided to enter the INSA Centre Val de Loire university after being graduated from the school. This French educational institution was offering a brand-new cybersecurity course. After getting the master degree in cybersecurity, I've started working in as virus analyst in a little anti-malware vendor. In 2018, I've decided to start Virus Removal project. The main target of this site is to help people to deal with PC viruses of any kind.

Leave a Reply

Your email address will not be published.


Back to top button