Categories: Malware

How to remove “Exploit.CVE-2018-0802.Gen”?

The Exploit.CVE-2018-0802.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Exploit.CVE-2018-0802.Gen virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Exploit.CVE-2018-0802.Gen?


File Info:
crc32: ADB42019md5: 55e433a4e4a78b0770612f6f52061248name: upload_filesha1: 48078905f81be2621af72230eb3bf92858b6c5aesha256: 647fa399360fe55ad3a75d09c2015d7e91957535a10be355c53e117a3b066a0esha512: 59113a338c806802a553f9fdb3c4aedd217823edb2885d482238f406718e0e3ec1f1cec85c499114e5554d44ef36bd6a9b76ca45ece0e1c1dbb4cf593a39f7f5ssdeep: 768:CAqJt/UCpK0mB6m6BEeWDDVw4ObnndnkszfE2KhLk1Uj6wFgWIpEfkFwfdrZxQNv:22MK56mHeWDf8ndBzjiBjG9iEwfyNtype: Composite Document File V2 Document, No summary info
Version Info:
0: [No Data]

Exploit.CVE-2018-0802.Gen also known as:

McAfee	Exploit-CVE2017-11882.yx
AegisLab	Hacktool.MSOffice.Generic.3!c
Arcabit	Exploit.CVE-2018-0802.Gen
Invincea	Troj/DocExp-AB
Symantec	Trojan.Gen.NPE
Avast	Win32:ShellCode [Expl]
Kaspersky	HEUR:Exploit.MSOffice.Generic
BitDefender	Exploit.CVE-2018-0802.Gen
MicroWorld-eScan	Exploit.CVE-2018-0802.Gen
Ad-Aware	Exploit.CVE-2018-0802.Gen
Emsisoft	Exploit.CVE-2018-0802.Gen (B)
McAfee-GW-Edition	Exploit-CVE2017-11882.yx
FireEye	Exploit.CVE-2018-0802.Gen
Sophos	Troj/DocExp-AB
MAX	malware (ai score=80)
ZoneAlarm	HEUR:Exploit.MSOffice.Generic
GData	Exploit.CVE-2018-0802.Gen
ALYac	Exploit.CVE-2018-0802.Gen
TACHYON	Suspicious/W97.CVE-2017-11882
ESET-NOD32	probably a variant of Win32/Exploit.CVE-2017-11882.C
Ikarus	Win32.Outbreak
Fortinet	MSOffice/CVE_2017_11882.B!exploit
AVG	Win32:ShellCode [Expl]
Qihoo-360	Generic/Trojan.Exploit.ed7