Windows 10: Windows Defender daily Occamy.C dll warnings

Every day Windows Defender finds a new Occamy.C trojan in my E drive. I manually went through the drive and there is nothing suspicious (hidden files are set to visible), I did a full PC scan and E drive only scan with both Defender and Malwarebytes, including an offline scan, but nothing is detected.

I can never see the file that is detected, but it is ALWAYS named as "HO_XXXXXXXX.dll" with the X being a capital letter or number as seen in the examples.

I haven't been downloading any sus files or visiting shady websites, any clue how to fix this? Could it be a false positive?

On the E drive I have game libraries, keyboard software and its my target drive for Nvidia Shadowplay recordings among other things, could it be from one of those?



https://preview.redd.it/v0ezi1wy66x...bp&s=f34a440f2b52746dcd9fa2203d8902d63bbb4927

https://preview.redd.it/m6ngf3wy66x...bp&s=c9149175859842c61de069d34fbbd84709617c75

https://preview.redd.it/7046w2wy66x...bp&s=675bbfe922c62d41b2124e3b0c1702b74a3a60f9

https://preview.redd.it/x1jgy2wy66x...bp&s=ab49e8ceb65c88399fa47f11d7768cdbf5d3e937

submitted by /u/VForVarinius
[link] [comments]

:)

 

msvcp100.dll and msvcr100.dll in C:\

Hello back TPU!

Yesterday I saw two files(msvcp100.dll and msvcr100.dll) in my C:\ disk folder. What does this mean? I know this two files should be in C:\Windows or C:\Windows\System32 or somewhere in C:\Windows but not in main disk folder. I deleted this files but files appeared again today. Is this a virus or maybe an application? How can I check this?

Tintai

 

msvcp100.dll and msvcr100.dll in C:\

they are microsoft visual studio files, leave em alone.

 

Windows defender Trojan repeated warning

I have not yet tried independent scanners or the removal guide from the first post.

I am not sure how or what a good way to access the file is to submit to virustool.

The location for affected items listed by Windows Defender Security Center C:\users\[my username]\AppData\Local\Microsoft\Windows\INetCache\IE\[6 letter code]\deploy[1].xml does not exist. Presumably this is because Windows Defender quarantined this. I
presumably would need to restore this to get the file back but I am reluctant to restore something Windows Defender identifies as a threat (for obvious cautionary reasons).

The malware removal guide has an overwhelming amount of information and requires downloading, installing, accepting security warnings etc for 3rd party software that I am not familiar with so I am proceeding cautiously and incrementally and trying not to
make getting rid of a once per restart annoying message a too time consuming project. I am scanning with Malwarebytes now as a step in this process.