OC.exe virus help.

[anonymous-user]

Just done a scan of my dad’s Win 7 hard drive and the anti virus software has found a file called oc.exe that it cannot delete.

Anyone know how to get rid of this thing?

Cheers!

[Order66]

It won't be able to delete because the file is open.

Options:
1. open task manager and kill the program, then get AV to delete
2. start in safe mode then run the AV
3. Clean install and upgrade to windows 10 (not taking the piss, windows 7 is now fundamnetally unsecure)

[TonyRPH]

Order66 said:

<snip>
3. Clean install and upgrade to windows 10 (not taking the piss, windows 7 is now fundamnetally unsecure)

No, Windows 7 is fine at the moment.

Support for Windows 7 ends in January 2020, however it'll likely be secure for a while after that (just in the same way XP was after support ended).

OP, just download Hitman Pro and run that https://www.hitmanpro.com/en-us/hmp.aspx

There is a free 30 day trial, and you'll have to supply an email address, however it's a Sophos product so quite trustworthy.

[shtu]

I tend to reach for this

https://www.avg.com/en-ww/download.prd-arl.

[anonymous-user]

Cheers guys! I’ll work my way down the list from simplest to most difficult and see how we go.

[anonymous-user]

Weirdly it’s not listed in task manager!

[anonymous-user]

I’ve found the file in windows explorer and it says it’s the Ask Installer from Ask.com?

[TonyRPH]

garyhun said:

Weirdly it’s not listed in task manager!

That's because it will run as differing names after each reboot.

Additionally, it could be called some 'random string of characters.exe' on disk but identify as something else in task manager - or even hide itself in the case of a rootkit.

Process Explorer might show more info.

But seriously, stop messing around and just run HitmanPro - I'm fairly certain it'll fix your issue. I'll bet my 20+ years IT experience on it....

[anonymous-user]

TonyRPH said:

garyhun said:

Weirdly it’s not listed in task manager!

That's because it will run as differing names after each reboot.

Additionally, it could be called some 'random string of characters.exe' on disk but identify as something else in task manager - or even hide itself in the case of a rootkit.

Process Explorer might show more info.

But seriously, stop messing around and just run HitmanPro - I'm fairly certain it'll fix your issue. I'll bet my 20+ years IT experience on it....

Roger that! I shall run HitmanPro!

[anonymous-user]

Tony and others,

Thanks for the advice. HitmanPro got rid of loads of rubbish including the .exe malware in about 10 minutes.

Very impressed and Dad very happy!

[TonyRPH]

garyhun said:

Tony and others,

Thanks for the advice. HitmanPro got rid of loads of rubbish including the .exe malware in about 10 minutes.

Very impressed and Dad very happy!

[alfie2244]

garyhun said:

Tony and others,

Thanks for the advice. HitmanPro got rid of loads of rubbish including the .exe malware in about 10 minutes.

Very impressed and Dad very happy!

Me too.........many thanks.

[bitchstewie]

garyhun said:

Tony and others,

Thanks for the advice. HitmanPro got rid of loads of rubbish including the .exe malware in about 10 minutes.

Very impressed and Dad very happy!

If you've not already done so I'd suggest checking passwords to ensure anything it found mean any sensitive data is any more compromised than it may already be.

[anonymous-user]

bhstewie said:

garyhun said:

Tony and others,

Thanks for the advice. HitmanPro got rid of loads of rubbish including the .exe malware in about 10 minutes.

Very impressed and Dad very happy!

If you've not already done so I'd suggest checking passwords to ensure anything it found mean any sensitive data is any more compromised than it may already be.

Luckily the only thing he has a password for is his hotmail account. He does nothing like banking etc online.